PKI for Mere Mortals
summary
Creates and renews real TLS certificates using Posh Acme plus the Cloudflare plugin to satisfy DNS challenges, stores orders under C:\ProgramData\PoshAcme\le-prod, and exports usable .pfx files (default passphrase "PoshAcme"). A PowerShell Universal page and scheduled job auto‑renews 10 days before expiry so certificates rotate roughly every 90 days. Demo shows self‑signed fallback, letsencrypt issuance, and a working dashboard integration; limits mentioned include about 25 jobs a day.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:06Certificates and uses
- 3:35Self-signed cert with PowerShell
- 6:54Let's Encrypt trusted certs
- 12:27Automating PKI with PSUD
- 21:46Certs via dashboard
- 35:10Q&A
related talks
36mYou Like It Or Not; You Need It! - PKI And Certificate Management
13mAutomating PKI: Paddy Power Betfair's Journey with Vault
25mSSL All The Things
06mKeynote: Ten Years as a Free, Open, and Automated Certificate Authority
14mAutomated (PKI) Infrastructure: The AI You Should Be Thinking About
56mCreate Your Own Serverless PKI
25mSecuring Meta's Production PKI Credentials
45mLet's Encrypt ActiveMQ and Karaf!