Guides
The pages under Installation and Adding hosts take you from nothing to a running setup. These guides are for the tasks that come after: one task per page, with the steps, a check that it worked, and what to do when it does not. Each one links to the operations guide for the complete details. If you want to know why something works the way it does, the Learn pages explain the idea behind it.
Get certificates
| I want to | Guide |
|---|---|
| Issue my first certificate in the web UI | Issue a first certificate in the web UI |
| Let certbot get and renew certificates | Certbot with MyOwnPKI |
| Use acme.sh | acme.sh with MyOwnPKI |
| Use lego | lego with MyOwnPKI |
| Use Traefik or Caddy | Traefik and Caddy as ACME clients |
| Say which names a client may ask for, approve them, or create an EAB key | Domains, approvals and EAB keys |
| Understand why validation fails on my network | Split DNS and the network for validation |
| Renew or revoke a certificate | Renew and revoke certificates |
| Run the server behind nginx or another proxy | Put MyOwnPKI behind a reverse proxy |
Trust and authorities
| I want to | Guide |
|---|---|
| Make laptops, phones and servers trust my root | Make clients trust your root |
| Create a root and an intermediate, or replace one | CA lifecycle: create, renew, replace |
| Keep the root key on a machine that is offline | Sign with an offline root |
| Move over from the old Bash suite | Move from the old Bash suite |
Run it
| I want to | Guide |
|---|---|
| Back up, and prove that a restore works | Backup and restore |
| Add people, set roles and a second factor, create API tokens | Users, roles, second factor and API tokens |
| See who did what, and check that the log was not changed | The audit log |
| Know what to do when the server is sealed, a secret is lost or a CA is compromised | When things go wrong |
More
| I want to | Page |
|---|---|
| Find a quick answer | FAQ |
| Look up a term | Glossary |
| See what the screens look like | A tour of the web UI |
| Fix an error message | Troubleshooting |