Devices
Connect to devices over SSH, deploy certificate material, and control chain, key, and revocation file layout.
Overview
SecuriTLS can connect to your server over SSH using stored credentials and deploy certificate attachments to the target system.
Planned future device types
- AWS ACM
- Azure Key Vault
- GCP CAS
Attachments
You can attach Leaf certificates for deployment to a device and specify the target file path used during deployment.
Chain options
- Install leaf plus intermediates recommended
- Install leaf only and provide a separate CA file
- Include root CA in CA file when needed
Key options
- Combined key plus certs one PEM
- Separate key file PEM
- Do not include key
- Encrypted PKCS#8 using a Secret credential
CRL options
- None recommended
- Bundle CRLs into a single file
- Directory with one CRL per CA
You can also define a reload command or other command to run when a deployed CRL is updated.
Status meanings
- Valid
- Modified
- No deployment attempted
- Unable to connect