<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Pki on Gerard Samuel</title><link>https://gerardsamuel.me/tags/pki/</link><description>Recent content in Pki on Gerard Samuel</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Sun, 14 Jul 2024 14:20:35 -0400</lastBuildDate><atom:link href="https://gerardsamuel.me/tags/pki/index.xml" rel="self" type="application/rss+xml"/><item><title>Getting Started With Smallstep</title><link>https://gerardsamuel.me/posts/getting-started-with-smallstep/</link><pubDate>Sun, 14 Jul 2024 14:20:35 -0400</pubDate><guid>https://gerardsamuel.me/posts/getting-started-with-smallstep/</guid><description>&lt;p&gt;I needed to host an internal PKI (Private Key Infrastructure) to test a secrets management solution.
Microsoft Windows PKI requires a complete Active Directory setup, which is overkill for what I needed. Plus, I wanted something open-source.
Smallstep&amp;rsquo;s step-ca is open source and is a well-featured private key solution.
This post will explain how I set it up using a Nitrokey HSM on a Raspberry Pi 4.&lt;/p&gt;</description><media:content xmlns:media="http://search.yahoo.com/mrss/" url="https://gerardsamuel.me/posts/getting-started-with-smallstep/featured.webp"/></item></channel></rss>