General

How do I add and manage provisioner admins?
To add a new basic admin user to a provisioner, you can run the below command, substituting in the user’s email and the name of the provisioner. step beta ...
Fri, 29 Apr, 2022 at 1:44 PM
How do I get notifications about expiring certificates?
Sometimes it can be very useful to get notifications about certificates that are about to expire. This process in simple to setup for Certificate Manager. ...
Sat, 30 Apr, 2022 at 7:28 AM
basics of a bot flow
Here is a summary of steps to setup the bot flow: Create JWK provisioner with Password step beta ca provisioner add <name> --create --type JWK i...
Tue, 17 Jan, 2023 at 3:17 PM
Can I set a default key algorithm per authority/provisioner?
The `step` CLI generates keys client-side, so it's not possible to enforce these defaults on your authority. Alternatively, it is possible to eithe...
Tue, 28 Jun, 2022 at 1:22 PM
Configuring hosts for SSH on Certificate Manager
Configuring Hosts for SSH on Smallstep Certificate Manager This documentation is for Smallstep Certificate Manager only. It does not apply to Smallstep SSH...
Fri, 23 Sep, 2022 at 10:31 AM
How to add Relative Distinguished Names to a certificate Subject line
By default (with the exception of OIDC provisioners), the `step` toolchain will use the <subject> as the Common Name for a certificate. At the time of...
Fri, 6 Jan, 2023 at 1:14 PM
How to store leaf certificate keys on a YubiHSM2
YubiHSM2 support requires the use of step-kms-plugin as a plugin for the step CLI. Add it to your $PATH or to $(step path --base)/plugins. Documentation can...
Wed, 25 Jan, 2023 at 10:32 AM
What's the difference among admin types?
There are three levels of admins: Dashboard Admin, Authority Admin, and Provisioner Admin. Dashboard Admin: Can access the UI dashboard for Certificate...
Wed, 25 Jan, 2023 at 10:38 AM