Pick your path
Walkthroughs in the order a particular role needs them, from the first screen to a working setup.
- PKI administrator
Stand up your own PKI
From an empty install to a root, an issuing CA, templates and the first certificate.
7 steps → - Windows and AD administrator
Replace ADCS for your Windows domain
Keep Group Policy autoenrollment and move the CA behind it to Kryptkeeper.
6 steps → - Platform and DevOps engineer
Automate renewal for servers and devices
Get certificates renewing and installing themselves, and hear about it only when one can't.
8 steps → - Security lead
Take over an existing estate
Find what you already have, give every certificate an owner, and bring it under renewal.
7 steps → - Security and audit
Govern it and prove it
Least privilege, a second person on sensitive changes, and evidence an auditor will accept.
7 steps → - Platform engineer
Machine and workload identity
Identities for workloads, SSH and code signing, approved before they exist.
4 steps → - Developer and integrator
Integrate with your own tools
Write a plugin for a device we don't support, and send every event to the tools you already run.
4 steps →