smallstep/cli

Support for `--admin-kms` in `step ca provisioner` subcommands

Opened this issue · 0 comments

For CA administrative functions, it would be nice to be able to use a KMS-bound key.

This enables a flow where a YubiKey could be used to admin the CA, using an admin cert acquired via ACME DA.