Provisioners

What provisioner types and workflows can I choose from?
⚠️ Custom provisioners can be configured for Certificate Manager. Create a support ticket or modify the default SSH Professional provisioners. Some of ...
Sun, 1 May, 2022 at 10:20 AM
What are provisioners?
Provisioners are used by issuing authorities to authenticate certificate requests. Provisioners make it easy to automate certificate management where possib...
Sun, 1 May, 2022 at 10:15 AM
How do I change the key and password for my provisioner?
update the provisioner with a new pub and priv key step beta ca provisioner update jwkLinda --private-key=/Users/lindabrown/test.priv --public-key=/Users...
Sun, 1 May, 2022 at 10:49 AM
How do I add a template to my provisioner?
Templates can be added to Certificate Manager authorities only. If you need a template added to an SSH Professional authority, create a support ticket. ...
Sun, 1 May, 2022 at 10:33 AM
How do I see all of my existing provisioners’ settings?
It’s often helpful to inspect the details of an existing provisioner. Doing so will help you understand the default behavior of the provisioner and which fl...
Sun, 1 May, 2022 at 10:42 AM
SSH Service Accounts with JWK Provisioners
This how-to describes one method of supporting SSH service accounts on Smallstep Certificate Manager using JWK Provisioners. In Certificate Manager, authori...
Sun, 1 May, 2022 at 10:57 AM
How do I change certificate key and extended key usage (KU/EKU)?
There are two ways of defining the KU and EKU for certificates generated by the step toolchain; both require the use of templates. Here’s a basic example of...
Wed, 25 Jan, 2023 at 10:29 AM
Limitations of revocation via OIDC provisioner
There are generally two ways of revoking a certificate: via certificate serial number or by passing certificate and key directly. The command would look som...
Tue, 31 Jan, 2023 at 10:49 AM