Kryptkeeper
Feature

Templates and policy

Decide once what a certificate may look like, then let people self-serve.

Templates fix key types, lifetimes and approvals. Issuance policies add rules on top, can be drafted from plain English, and can be dry-run against a request before they go live.

kryptkeeper.example.com/policies

How it works

  1. Create a certificate template

    Set the key, lifetime, usage and approval rules for a kind of certificate.

    11 steps

  2. Edit a template and read its revisions

    Change a template and see exactly what changed and who changed it.

    5 steps

  3. Draft a policy from plain English

    Describe a rule in a sentence and review the policy it produces.

    9 steps

  4. Create a policy and dry-run a request

    Test a policy against a request before it can block anyone.

    6 steps

Docs

Paths that use this