Certificate Authorities

Can one certificate manager team link to multiple intermediates?
The answer is YES! You can have multiple intermediates link to a single smallstep team.  Option 1: Create multiple provisioners per authority Most com...
Tue, 14 Jun, 2022 at 4:42 PM
How do I change the default, minimum, and maximum certificate lifetimes?
Provisioners authenticate certificate requests. Certificate lifetimes, access control policies, renewal, templates, and many other options are configurable ...
Fri, 29 Apr, 2022 at 11:18 AM
My root smallstep certificate is CA:false?
Correct. It's actually a "leaf" certificate that was generated by a CA and therefore does not function as a CA itself.
Mon, 9 May, 2022 at 10:28 AM
How do I create a new authority?
With a team in Certificate Manager, a user can create and manage as many Certificate Authorities (CAs) as desired from the dashboard. How to create a ne...
Thu, 21 Apr, 2022 at 11:56 AM
How do I make an SSH CA from Certificate Manager?
In the Certificate Manager UI, you cannot make an SSH authority at this time. Please create a ticket to request an SSA CA be created. 
Tue, 19 Apr, 2022 at 4:15 PM
Can I add a new authority using an existing Root Certificate?
Yes! If desired, users can bring their own Root and Intermediate Certificates and use them to issue subsequent leaf certificates with Certificate Manage...
Sat, 30 Apr, 2022 at 7:15 AM
How to create or link an authority using the smallstep dashboard
Within a team’s Certificate Manager dashboard, one can create and manage as many certificate authorities as desired. In Certificate Manager, navigate to th...
Mon, 18 Apr, 2022 at 9:09 AM
Can I customize the Root & Intermediate Certificate for my new authority?
Yes! By default, Root & Intermediate Certificates generated for Certificate Manager come with a standard path length of 1 and signature algorithm of...
Sat, 30 Apr, 2022 at 7:17 AM
How can I issue certificates to an environment with a limited network?
Due to compliance or security requirements, your network may be heavily segmented with very limited access. Devices running in a private subnet could potent...
Tue, 31 May, 2022 at 11:50 AM