OpenXPKI

An open, enterprise-grade PKI/Trustcenter

Table of Contents:

Basics

• Introduction
  • Key features
• Quickstart guide
  • Support
  • Docker
  • Configuration
  • Debian Builds
  • System Setup
  • Enabling the SCEP service
  • Support for Java Keystore
• Upgrading OpenXPKI
  • Release v3.32
  • Release v3.12
  • Release v3.x

Setup and Configuration

Setup and Configuration

• Overview
  • Main configuration
  • Config versioning
  • Config Caching and Signing
  • Logging
• Global
  • Database
  • System
  • Server Type (Fork vs. PreFork)
  • Watchdog
  • Crypto layer (global)
  • PKI Realms
• Realm
  • Authentication
  • Crypto layer
  • Profiles
  • Publishing
  • Notification
  • Workflow
• Workflow Definition
  • Workflow Head
  • States
  • Actions
  • Fields
  • Global Entities
  • Creating Macros (not implemented yet!)
• Workflow UI Rendering
  • Action Switch Page
  • Form Input Page
  • Markup of Final States
• WebUI components
  • Format Result List
  • Certificate search mask
  • Workflow search mask
  • Tasklist
• Certificate profiles
  • Naming
  • Validity
  • Styles
  • Subject and Process Information
  • Extensions
• Enrollment Workflow
  • Operational Modes
  • Workflow Logic
  • Sample Configuration
  • Workflow Configuration
  • Certificate Configuration

Automation / External APIs

Automation / External APIs

• Subsystems providing External APIs
  • Wrapper Configuration
    • Global Configuration
  • Webserver Config
    • TLS Client Authentication
    • TLS Client Authorization
• RPC Server API
  • Server-Side Configuration
    • Wrapper Configuration
  • Input Handling
    • allow_raw_post
    • parse_depth
  • Parameter Handling
    • Example: Revoke Certificate by Certificate Identifier
  • Response
  • Workflow Pickup
  • Examples
    • Retrieving the OpenAPI spec
• OpenAPI (aka Swagger)
• EST Endpoint / RFC 7030
  • Default Configuration
    • Smoke Test
    • Authenticated Test
• SCEP Server
  • Caveats

Operation

Operation

• Audit Log
  • Categories
    • CA Key Usage (cakey)
    • Entity Key Usage (key)
    • Certificate (entity)
    • Approval (approval)
    • ACL (acl)
    • System (system)
    • Application
  • Parameters
• Crypto Token Configuration
  • Overview
  • Initial Setup
    • Root Certificate
    • Issuing Certificate
    • Datasafe Token
  • Token Rollover

Indices and tables

• Index

• Search Page