diff --git a/certificate-manager/README.mdx b/certificate-manager/README.mdx index 5d2410e2..2f4b2dd6 100644 --- a/certificate-manager/README.mdx +++ b/certificate-manager/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Getting Started with Smallstep Certificate Manager -html_title: Certificate Manager Documentation from Smallstep -description: Learn how to get started with Smallstep Certificate Manager. +html_title: Certificate Manager Documentation Hub Overview +description: Complete guide to Smallstep Certificate Manager. Simplify enterprise PKI with automated certificate lifecycle management at scale easily. --- Smallstep Certificate Manager is a commercial product built on `step-ca` that delivers a highly available hosted certificate authorities, expiry notifications and alerts, a management dashboard, Active Revocation, API, and other features. With Smallstep Certificate Manager, you can easily issue private TLS/SSL certificates to all your things. [Learn more here.](https://smallstep.com/certificate-manager) diff --git a/certificate-manager/acme/README.mdx b/certificate-manager/acme/README.mdx index e49b6359..9117b786 100644 --- a/certificate-manager/acme/README.mdx +++ b/certificate-manager/acme/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep Certificate Manager Private ACME Server -html_title: Smallstep Certificate Manager Private ACME Server -description: Why, when and how to use the ACME protocol to issue and renew certificates with Smallstep Certificate Manager. +html_title: Private ACME Server Implementation Guide +description: Run a private ACME server with Certificate Manager. Automate certificate issuance using industry-standard ACME protocol for internal PKI. --- The Automated Certificate Management Environment (ACME) protocol for automated certificate management has seen vast adoption in the Web PKI since its inception in 2016. diff --git a/certificate-manager/acme/how-to-use-acme.mdx b/certificate-manager/acme/how-to-use-acme.mdx index 40dda6a3..0dff8a14 100644 --- a/certificate-manager/acme/how-to-use-acme.mdx +++ b/certificate-manager/acme/how-to-use-acme.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: How to Use ACME in Internal Networks -html_title: How to Use ACME in Internal Networks -description: How to use the ACME protocol in internal networks. +html_title: How to Use ACME in Certificate Manager +description: Deploy ACME in Certificate Manager for automated workflows. Complete guide to using ACME protocol for internal certificates at enterprise scale. --- With Smallstep Certificate Manager diff --git a/certificate-manager/acme/when-to-use-acme.mdx b/certificate-manager/acme/when-to-use-acme.mdx index bd5c4f08..9f1f881e 100644 --- a/certificate-manager/acme/when-to-use-acme.mdx +++ b/certificate-manager/acme/when-to-use-acme.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: When to Use ACME in Internal Networks -html_title: When to Use ACME in Internal Networks -description: When can the ACME protocol be used to issue and renew certificates in internal networks. +html_title: When to Use ACME for Certificate Management +description: Learn when ACME protocol suits your certificate needs. Understand use cases and limitations of automated certificate management for informed PKI decisions. --- At Smallstep we love the ACME protocol. diff --git a/certificate-manager/acme/why-use-acme.mdx b/certificate-manager/acme/why-use-acme.mdx index f60f9552..f2d6314c 100644 --- a/certificate-manager/acme/why-use-acme.mdx +++ b/certificate-manager/acme/why-use-acme.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Why ACME for Internal Networks? -html_title: Why ACME for Internal Networks? -description: Why should you use the ACME protocol to issue and renew certificates in internal networks. +html_title: Benefits of ACME for Internal PKI Systems +description: Discover why ACME protocol transforms internal certificate management. Learn the benefits of automation over manual PKI processes. --- The Automated Certificate Management Environment (ACME) protocol is used to automate certificate issuance, renewal and revocation of X.509 certificates. diff --git a/certificate-manager/basic-ops.mdx b/certificate-manager/basic-ops.mdx index 13b12ea8..b45a0460 100644 --- a/certificate-manager/basic-ops.mdx +++ b/certificate-manager/basic-ops.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep Certificate Manager Basic Certificate Operations -html_title: Smallstep Certificate Manager Basic Certificate Operations -description: Basic Certificate Operations with Certificate Manager +html_title: Basic Certificate Manager Operations Guide +description: Essential Certificate Manager operations for daily use. Learn certificate issuance, renewal, revocation, and monitoring workflows. --- In this documentation, we will explore basic certificate operations using the [`step`](https://smallstep.com/docs/step-cli) command-line tool. diff --git a/certificate-manager/byo-root.mdx b/certificate-manager/byo-root.mdx index fd9c21ec..4407edf2 100644 --- a/certificate-manager/byo-root.mdx +++ b/certificate-manager/byo-root.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: "Smallstep Certificate Manager: Bring Your Own Root" -html_title: "Smallstep Certificate Manager: Bring Your Own Root" -description: Use your existing root to sign an intermediate certificate for use in Smallstep +html_title: Bring Your Own Root CA Integration Guide +description: Use existing root CAs with Certificate Manager. Preserve PKI investments while modernizing certificate automation infrastructure. --- diff --git a/certificate-manager/core-concepts.mdx b/certificate-manager/core-concepts.mdx index 921825cc..4c42197d 100644 --- a/certificate-manager/core-concepts.mdx +++ b/certificate-manager/core-concepts.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Core Concepts -html_title: Core Concepts -description: Core Concepts of the Smallstep Platform. +html_title: Certificate Manager Core Concepts Guide +description: Fundamental concepts of Certificate Manager platform. Master PKI principles for effective enterprise certificate automation. --- The Smallstep Platform is powered by a number of components that can be combined to deliver automated certificate management for a broad set of use cases and implementations. diff --git a/certificate-manager/custom-certs.mdx b/certificate-manager/custom-certs.mdx index 1181def0..3d18e0ad 100644 --- a/certificate-manager/custom-certs.mdx +++ b/certificate-manager/custom-certs.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: "Smallstep Certificate Manager: Customize Certificates" -html_title: "Smallstep Certificate Manager: Customize Certificates" -description: Changing certificate lifetimes and using templates for customized certificates +html_title: Create Custom Certificate Templates Guide +description: Create custom certificate templates in Certificate Manager. Tailor certificates to specific enterprise requirements and use cases. --- In this documentation, we will explore customizing certificates and templates using the [`step`](https://smallstep.com/docs/step-cli) command-line tool. diff --git a/certificate-manager/getting-started.mdx b/certificate-manager/getting-started.mdx index 5e81b09c..59583c05 100644 --- a/certificate-manager/getting-started.mdx +++ b/certificate-manager/getting-started.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep Certificate Manager Getting Started -html_title: Smallstep Certificate Manager Getting Started -description: Getting started with Certificate Manager +html_title: Get Started with Certificate Manager Guide +description: Get started with Certificate Manager in minutes. Quick setup guide for enterprise certificate automation and PKI management with best practices. --- Smallstep [Certificate Manager](https://smallstep.com/certificate-manager) is a commercial product that delivers a managed certificate authority (CA) capable of issuing private x.509 TLS certificates. diff --git a/certificate-manager/how-it-works.mdx b/certificate-manager/how-it-works.mdx index c0fdd6a2..e7b4653f 100644 --- a/certificate-manager/how-it-works.mdx +++ b/certificate-manager/how-it-works.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep Certificate Manager How It Works -html_title: Smallstep Certificate Manager How It Works -description: +html_title: Certificate Manager Architecture Guide +description: Technical architecture of Certificate Manager. Understand components, workflows, and security model for enterprise PKI deployment planning. Understand how Smallstep Certificate Manager works and if it’s appropriate to your use case. --- diff --git a/certificate-manager/kubernetes-tls/README.mdx b/certificate-manager/kubernetes-tls/README.mdx index 60adbf0f..332c2b0f 100644 --- a/certificate-manager/kubernetes-tls/README.mdx +++ b/certificate-manager/kubernetes-tls/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Kubernetes TLS -html_title: Kubernetes TLS -description: Best practices and detailed instructions for configuring Kubernetes TLS. +html_title: Kubernetes TLS Management Complete Guide +description: Comprehensive Kubernetes TLS certificate management. Automate certificate lifecycle for ingress, pods, and service mesh security. image: /graphics/kubernetes-tls-unfurl.png --- diff --git a/certificate-manager/kubernetes-tls/kubernetes-autocert.mdx b/certificate-manager/kubernetes-tls/kubernetes-autocert.mdx index 3ac7d6a3..90ef4ea1 100644 --- a/certificate-manager/kubernetes-tls/kubernetes-autocert.mdx +++ b/certificate-manager/kubernetes-tls/kubernetes-autocert.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Integrate Certificate Manager with Autocert for Kubernetes TLS -html_title: Integrate Certificate Manager with Autocert for Kubernetes TLS -description: Learn how to deliver certificates directly to Kubernetes pods and containers. +html_title: Kubernetes Autocert for Automatic TLS Setup +description: Automate mTLS between Kubernetes pods with autocert. Zero-config certificate provisioning for microservice security at scale. image: /graphics/kubernetes-tls-unfurl.png --- diff --git a/certificate-manager/kubernetes-tls/kubernetes-container-tls.mdx b/certificate-manager/kubernetes-tls/kubernetes-container-tls.mdx index c21ff663..5056b40f 100644 --- a/certificate-manager/kubernetes-tls/kubernetes-container-tls.mdx +++ b/certificate-manager/kubernetes-tls/kubernetes-container-tls.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Kubernetes Container TLS -html_title: Kubernetes Container TLS -description: Best practices and detailed instructions for delivering certificates to Kubernetes containers. +html_title: Container-to-Container TLS in Kubernetes +description: Enable mTLS between Kubernetes containers. Secure pod-to-pod communication with automated certificate provisioning and renewal. image: /graphics/kubernetes-tls-unfurl.png --- diff --git a/certificate-manager/kubernetes-tls/kubernetes-ingress-tls.mdx b/certificate-manager/kubernetes-tls/kubernetes-ingress-tls.mdx index 93c691e8..d90100a5 100644 --- a/certificate-manager/kubernetes-tls/kubernetes-ingress-tls.mdx +++ b/certificate-manager/kubernetes-tls/kubernetes-ingress-tls.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Kubernetes Ingress TLS -html_title: Kubernetes Ingress TLS -description: Best practices and detailed instructions for configuring Kubernetes ingress TLS. +html_title: Kubernetes Ingress TLS Automation Guide +description: Automate Ingress TLS certificates in Kubernetes. Secure cluster ingress with automated certificate lifecycle management for container apps. image: /graphics/kubernetes-tls-unfurl.png --- diff --git a/certificate-manager/kubernetes-tls/kubernetes-install.mdx b/certificate-manager/kubernetes-tls/kubernetes-install.mdx index d2a58490..d4710c7f 100644 --- a/certificate-manager/kubernetes-tls/kubernetes-install.mdx +++ b/certificate-manager/kubernetes-tls/kubernetes-install.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Kubernetes Install TLS -html_title: Kubernetes Install TLS -description: Best practices and detailed instructions for delivering certificates to Kubernetes clusters. +html_title: Install Certificate Manager in Kubernetes +description: Deploy Certificate Manager in Kubernetes clusters. Step-by-step installation guide for automated TLS certificate management at scale. image: /graphics/kubernetes-tls-unfurl.png --- diff --git a/certificate-manager/kubernetes-tls/kubernetes-step-issuer.mdx b/certificate-manager/kubernetes-tls/kubernetes-step-issuer.mdx index f36184c9..d345f006 100644 --- a/certificate-manager/kubernetes-tls/kubernetes-step-issuer.mdx +++ b/certificate-manager/kubernetes-tls/kubernetes-step-issuer.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Integrate Certificate Manager, step-issuer, and cert-manager for Kubernetes TLS -html_title: Integrate Certificate Manager, step-issuer, and cert-manager for Kubernetes TLS -description: Documentation for instructions for configuring Kubernetes TLS +html_title: Deploy Kubernetes Step Issuer for TLS Guide +description: Install step-issuer in Kubernetes for native certificate management. Integrate with cert-manager for automated TLS provisioning. image: /graphics/kubernetes-tls-unfurl.png --- diff --git a/certificate-manager/webhook-events.mdx b/certificate-manager/webhook-events.mdx index 7ceb1b64..35a23093 100644 --- a/certificate-manager/webhook-events.mdx +++ b/certificate-manager/webhook-events.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Webhook Events -html_title: Smallstep Platform | Webhook Events for Observability -description: Smallstep Platform Webhook Events provide observability around certificate lifecycle activities. +html_title: Configure Certificate Webhook Events Guide +description: Integrate certificate lifecycle events via webhooks. Automate workflows based on certificate issuance, renewal, and revocation. --- diff --git a/design-document.mdx b/design-document.mdx index 9ce24005..0c871c0d 100644 --- a/design-document.mdx +++ b/design-document.mdx @@ -1,8 +1,9 @@ --- +updated_at: September 17, 2025 title: The Design & Architecture of Smallstep -html_title: The Design & Architecture of Smallstep +html_title: Step-CA Architecture & Design Document pagetitle: Architectural Design Document | Smallstep Documentation -description: A technical design document for readers who want to get up to speed with step +description: Technical architecture and design principles of step-ca. Understand the security model and implementation details of our CA. --- This is a technical design document for readers that are already familiar with public key infrastructure (PKI) and certificate management and want to get up to speed with _step certificates_ quickly. diff --git a/mtls/README.mdx b/mtls/README.mdx index 17ceaa4a..8325c013 100644 --- a/mtls/README.mdx +++ b/mtls/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: "Hello mTLS" -html_title: mTLS configuration generator for services and frameworks -description: Learn to configure services and frameworks to use mutual TLS. Copy and paste commands for NGINX, node.js, Kafka, MySQL, PostgreSQL, golang, Ruby, and more. +html_title: Mutual TLS (mTLS) Implementation Guide +description: Complete guide to mutual TLS implementation. Secure service-to-service communication with bidirectional authentication for Zero Trust design. --- import { ToolsIcon } from '@smallstep/step-ui'; diff --git a/platform/core-concepts.mdx b/platform/core-concepts.mdx index 7d027f17..1d22b7d1 100644 --- a/platform/core-concepts.mdx +++ b/platform/core-concepts.mdx @@ -1,8 +1,8 @@ --- -updated_at: September 08, 2025 +updated_at: September 17, 2025 title: Core Concepts -html_title: Smallstep Core Concepts -description: High-level overview of Smallstep platform components and concepts, and how they work together to protect your resources and provide strong assurance of device identity. +html_title: Platform Core Security Concepts Explained +description: Fundamental concepts of device identity platform. Understand trust models, attestation, and certificate lifecycle management. --- Device Identity ensures that only company-owned devices can access your enterprise's most sensitive resources, from Wi-Fi networks to SaaS apps. By using certificates to bind access to hardware, Smallstep neutralizes security threats and ensures compliance and governance across your organization. diff --git a/platform/enrollment-guide.mdx b/platform/enrollment-guide.mdx index f0278ad0..314c354c 100644 --- a/platform/enrollment-guide.mdx +++ b/platform/enrollment-guide.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Device Enrollment Guide -html_title: How to add devices to Smallstep -description: There are several ways to add your devices to Smallstep. In this guide, we talk through the options. +html_title: Device Enrollment Implementation Guide +description: Step-by-step guide for device enrollment and inventory management. Set up secure certificate enrollment for all enterprise devices. --- In this guide, diff --git a/platform/smallstep-agent.mdx b/platform/smallstep-agent.mdx index c455f48b..21762fc1 100644 --- a/platform/smallstep-agent.mdx +++ b/platform/smallstep-agent.mdx @@ -1,8 +1,8 @@ --- -updated_at: September 10, 2025 +updated_at: September 17, 2025 title: Smallstep Agent for Linux -html_title: Install the Smallstep Agent on a Linux endpoint -description: The Smallstep agent is used across security, IT, and DevOps teams to enable end-to-end network encryption, privileged access management, passwordless authentication, and much more. +html_title: Smallstep Agent for Device Management Guide +description: Deploy and configure Smallstep Agent on Linux. Automated device identity management and certificate renewal for enterprise Linux fleets. --- The Smallstep Agent for Linux is a background component of the [Smallstep Desktop App](./smallstep-app.mdx). Choose one or the other depending on your deployment needs. diff --git a/platform/smallstep-api.mdx b/platform/smallstep-api.mdx index 5ea04fa5..ff3f4f10 100644 --- a/platform/smallstep-api.mdx +++ b/platform/smallstep-api.mdx @@ -1,8 +1,8 @@ --- -updated_at: July 07, 2025 +updated_at: September 17, 2025 title: Smallstep API -html_title: Smallstep API -description: The Smallstep platform is used across security, IT, and DevOps teams to enable end-to-end network encryption, privileged access management, passwordless authentication, and much more. +html_title: Platform API Reference Documentation Guide +description: Complete API reference for managing devices, certificates, and PKI programmatically. Integrate Smallstep into your security workflows. --- With the Smallstep API, you can manage: diff --git a/platform/smallstep-app.mdx b/platform/smallstep-app.mdx index 689892ff..cb785bab 100644 --- a/platform/smallstep-app.mdx +++ b/platform/smallstep-app.mdx @@ -1,8 +1,8 @@ --- -updated_at: April 24, 2025 +updated_at: September 17, 2025 title: The Smallstep App -html_title: The Smallstep App -description: This document specifies app download links, system requirements, runtime requirements, file permissions, and telemetry data collected for the Smallstep desktop app. +html_title: Smallstep App User Documentation Guide +description: Complete guide to the Smallstep App for enterprise security workflows. Manage certificates, devices, and identity from a unified interface. --- Smallstep ensures that access to financial data, code repositories, PII, and other sensitive resources is only possible from trusted devices. diff --git a/registration-authorities/README.mdx b/registration-authorities/README.mdx index 65e26a83..ad52f879 100644 --- a/registration-authorities/README.mdx +++ b/registration-authorities/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Getting Started with Smallstep Registration Authorities -html_title: Registration Authority, extend your existing PKI -description: Provide automated enrollment and renewal of certificates using modern techniques while extending your existing internal PKI +html_title: Registration Authorities Implementation +description: Implement Registration Authorities for distributed PKI. Scale certificate issuance across multiple locations and security zones. --- Smallstep Registration Authorities (RA) provide automated enrollment and renewal of certificates using modern techniques while extending your existing internal PKI. Smallstep RAs act narrowly as a _registration authority_, accepting certificate orders, and authenticating certificate requests. Smallstep RAs do not sign certificates. Instead, certificate requests are passed to your existing PKI infrastructure to sign and catalog. Benefits of this approach include: diff --git a/registration-authorities/acme-for-cas.mdx b/registration-authorities/acme-for-cas.mdx index bee86b5d..1560237b 100644 --- a/registration-authorities/acme-for-cas.mdx +++ b/registration-authorities/acme-for-cas.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: ACME Registration Authority for Google Certificate Authority Service -html_title: ACME Registration Authority for Google Certificate Authority Service -description: How to configure a Smallstep ACME Registration Authority with GCP CAS. +html_title: ACME RA for Google Cloud CAS Setup Guide +description: Connect ACME to Google Cloud Certificate Authority Service. Automate certificate issuance using managed cloud PKI infrastructure. --- diff --git a/registration-authorities/acme-for-certificate-manager.mdx b/registration-authorities/acme-for-certificate-manager.mdx index 70a0029f..2f104520 100644 --- a/registration-authorities/acme-for-certificate-manager.mdx +++ b/registration-authorities/acme-for-certificate-manager.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: ACME Registration Authority for Smallstep Certificate Manager -html_title: ACME Registration Authority for Smallstep Certificate Manager -description: How to configure a Smallstep ACME Registration Authority with Certificate Manager. +html_title: Deploy ACME RA with Certificate Manager +description: Deploy ACME Registration Authority with Certificate Manager. Enable distributed ACME certificate issuance at enterprise scale. --- diff --git a/ssh/README.mdx b/ssh/README.mdx index 0f553dc4..094b4163 100644 --- a/ssh/README.mdx +++ b/ssh/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Getting Started with Smallstep SSH -html_title: Smallstep SSH Docs Introduction -description: Smallstep SSH Documentation +html_title: SSH Certificate Documentation Overview +description: Complete SSH certificate documentation for enterprises. Replace SSH keys with short-lived certificates for better security and compliance. --- Smallstep SSH is a commercial product that delivers a complete end-to-end SSH diff --git a/ssh/acls.mdx b/ssh/acls.mdx index aa06d1ca..cc25a4e6 100644 --- a/ssh/acls.mdx +++ b/ssh/acls.mdx @@ -1,6 +1,8 @@ --- +updated_at: September 17, 2025 title: Access Control Guide -description: SSH Access Control | Smallstep Documentation +description: Implement fine-grained SSH access controls with certificates. Define who can access which servers using certificate-based policies. +html_title: SSH Access Control Lists Configuration --- ### Prerequisites diff --git a/ssh/azure-ad.mdx b/ssh/azure-ad.mdx index b5003d82..09fed85a 100644 --- a/ssh/azure-ad.mdx +++ b/ssh/azure-ad.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Microsoft Entra ID Quickstart -html_title: Microsoft Entra ID Quickstart | SSH -description: SSH Azure Quickstart | Smallstep Documentation +html_title: SSH with Microsoft Entra ID (Azure AD) +description: Integrate SSH certificates with Microsoft Entra ID. Enable single sign-on for SSH using enterprise identity providers for unified access. --- ### Prerequisites diff --git a/ssh/client.mdx b/ssh/client.mdx index f28d161b..f26453d4 100644 --- a/ssh/client.mdx +++ b/ssh/client.mdx @@ -1,6 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep SSH Client Quickstart -description: Smallstep SSH Client Quickstart | Smallstep Documentation +description: Set up SSH client certificates for passwordless authentication. Simplify enterprise SSH access with certificate-based identity. +html_title: SSH Client Certificate Configuration Guide --- ### Prerequisites diff --git a/ssh/g-suite.mdx b/ssh/g-suite.mdx index f2d1d6ac..4656e32e 100644 --- a/ssh/g-suite.mdx +++ b/ssh/g-suite.mdx @@ -1,6 +1,8 @@ --- +updated_at: September 17, 2025 title: Google Workspace Quickstart -description: SSH Google Workspace Quickstart | Smallstep Documentation +description: Enable SSH access with Google Workspace credentials. Integrate enterprise identity provider with SSH certificate authentication. +html_title: Google Workspace SSH Integration Guide --- ### Prerequisites diff --git a/ssh/hosts-step-by-step.mdx b/ssh/hosts-step-by-step.mdx index 78f83788..ce244611 100644 --- a/ssh/hosts-step-by-step.mdx +++ b/ssh/hosts-step-by-step.mdx @@ -1,6 +1,8 @@ --- +updated_at: September 17, 2025 title: Enroll a Smallstep SSH Host Manually -description: Smallstep SSH Manual Host Installation Instructions | Smallstep Documentation +description: Step-by-step SSH host configuration with certificates. Deploy secure SSH infrastructure with automated certificate management. +html_title: SSH Host Certificate Setup Step-by-Step Guide --- diff --git a/ssh/hosts.mdx b/ssh/hosts.mdx index 4ecdb8f2..1f5c8e8a 100644 --- a/ssh/hosts.mdx +++ b/ssh/hosts.mdx @@ -1,6 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep SSH Host Quickstart -description: Smallstep SSH Host Quickstart | Smallstep Documentation +description: Configure SSH host certificates for server authentication. Eliminate TOFU (Trust On First Use) and secure SSH infrastructure. +html_title: SSH Host Certificate Quick Setup Tutorial --- diff --git a/ssh/how-it-works.mdx b/ssh/how-it-works.mdx index a87b720b..b23c0a05 100644 --- a/ssh/how-it-works.mdx +++ b/ssh/how-it-works.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Smallstep SSH How It Works -html_title: Smallstep SSH How It Works -description: Learn how Smallstep delivers single sign-on SSH with open source components (OpenSSH, PAM, NSS) and industry-standard protocols (SCIM & OIDC). +html_title: How SSH Certificates Work: Technical Guide +description: Technical overview of SSH certificate authentication. Learn how certificates replace keys for better security and management in modern SSH. --- import { FileWithFlippedCornerIcon } from '@smallstep/step-ui'; diff --git a/ssh/okta-gid-uid.mdx b/ssh/okta-gid-uid.mdx index 8a7404e9..c7159cb7 100644 --- a/ssh/okta-gid-uid.mdx +++ b/ssh/okta-gid-uid.mdx @@ -1,6 +1,8 @@ --- +updated_at: September 17, 2025 title: Okta UID GID Sync Guide -description: SSH Okta UID GID Sync +description: Synchronize Unix user and group IDs with Okta for SSH access. Maintain consistent identity across SSH infrastructure for unified management. +html_title: Okta UID/GID Sync for SSH Access Control --- ### How to sync UIDs and GIDs from Okta diff --git a/step-ca/README.mdx b/step-ca/README.mdx index 5b486353..ae38c37e 100644 --- a/step-ca/README.mdx +++ b/step-ca/README.mdx @@ -1,8 +1,8 @@ --- -updated_at: March 27, 2025 +updated_at: September 17, 2025 title: "`step-ca` server" -html_title: step-ca open source server -description: Learn about step-ca +html_title: Step-CA Certificate Authority Overview +description: Complete documentation for step-ca certificate authority. Deploy and manage your own private CA for enterprise PKI operations. cta: text: Install `step-ca` icon: ToolsIcon diff --git a/step-ca/acme-basics.mdx b/step-ca/acme-basics.mdx index 479d1ef0..a1243dc2 100644 --- a/step-ca/acme-basics.mdx +++ b/step-ca/acme-basics.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: ACME Basics -html_title: ACME Basics -description: An introduction to ACME, the common ACME challenge types, and how to use ACME clients with `step-ca` +html_title: ACME Protocol Basics for Step-CA Users +description: Learn ACME protocol fundamentals for step-ca. Implement automated certificate management using industry-standard protocols. --- `step-ca` supports the Automated Certificate Management Environment (ACME) protocol. diff --git a/step-ca/basic-certificate-authority-operations.mdx b/step-ca/basic-certificate-authority-operations.mdx index df8d2a87..98c6f99b 100644 --- a/step-ca/basic-certificate-authority-operations.mdx +++ b/step-ca/basic-certificate-authority-operations.mdx @@ -1,8 +1,8 @@ --- -updated_at: May 19, 2025 +updated_at: September 17, 2025 title: Basic Certificate Authority Operations -html_title: basic certificate authority operations -description: Learn about the basic certificate authority operations of step-ca +html_title: Basic Certificate Authority Operations +description: Learn basic certificate authority operations in Smallstep. Read docs today and simplify enterprise PKI management with automated workflows. --- diff --git a/step-ca/certificate-authority-core-concepts.mdx b/step-ca/certificate-authority-core-concepts.mdx index 29ea3335..0fa77193 100644 --- a/step-ca/certificate-authority-core-concepts.mdx +++ b/step-ca/certificate-authority-core-concepts.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Certificate Authority Core Concepts -html_title: Certificate authority core concepts for open source step-ca -description: Learn about certificate authority core concepts for open source step-ca +html_title: Core CA Concepts and Architecture Explained +description: Essential concepts for running a certificate authority. Understand CA architecture, trust models, and security considerations. --- diff --git a/step-ca/cryptographic-protection.mdx b/step-ca/cryptographic-protection.mdx index 5998a4da..fdb1c893 100644 --- a/step-ca/cryptographic-protection.mdx +++ b/step-ca/cryptographic-protection.mdx @@ -1,8 +1,8 @@ --- title: Cryptographic Protection -html_title: Cryptographic Protection -description: Store your CA private keys in hardware or in a cloud KMS -updated_at: March 26, 2024 +html_title: Secure Cryptographic Key Protection Methods +description: Secure private keys in step-ca deployments. Hardware security modules, key management, and cryptographic best practices for enterprise PKI. +updated_at: September 17, 2025 --- By default, `step-ca` stores its signing keys encrypted on disk. diff --git a/step-ca/getting-started.mdx b/step-ca/getting-started.mdx index d49bfe66..8b3c0dd2 100644 --- a/step-ca/getting-started.mdx +++ b/step-ca/getting-started.mdx @@ -1,8 +1,8 @@ --- +updated_at: September 17, 2025 title: Getting Started -html_title: Getting started with open source step-ca -description: Learn about step-ca and where to begin - +html_title: Getting Started with Step-CA Installation +description: Get started with step-ca certificate authority. Complete guide to installing and running your first private PKI infrastructure from scratch. --- diff --git a/step-ca/installation.mdx b/step-ca/installation.mdx index 5abc191a..6dea66f9 100644 --- a/step-ca/installation.mdx +++ b/step-ca/installation.mdx @@ -1,8 +1,8 @@ --- -updated_at: April 08, 2025 +updated_at: September 17, 2025 title: Install step-ca -html_title: Installing open source step-ca -description: Learn how to install step-ca +html_title: Install Step-CA Certificate Authority Guide +description: Install step-ca certificate authority on any platform. Quick deployment guide for private PKI infrastructure with comprehensive setup instructions. --- diff --git a/step-ca/integrations.mdx b/step-ca/integrations.mdx index 8756f20b..87f2d20a 100644 --- a/step-ca/integrations.mdx +++ b/step-ca/integrations.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Integrations -html_title: step-ca integrations -description: step-ca integrations +html_title: Step-CA Integration Ecosystem and Partners +description: Browse 100+ integrations for step-ca certificate authority. Connect PKI to existing identity and security infrastructure for unified access. --- diff --git a/step-ca/policies.mdx b/step-ca/policies.mdx index 78b84069..63606237 100644 --- a/step-ca/policies.mdx +++ b/step-ca/policies.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Certificate Issuance Policies -html_title: Certificate Issuance Policies -description: Certificate issuance policies can be used to allow or deny certificates to be signed based on the requested names. +html_title: Certificate Authority Policy Engine Reference +description: Define certificate issuance policies in step-ca. Enforce security rules and compliance requirements for PKI operations at scale effectively. --- Administrators can create a certificate issuance policy to configure which certificate names the CA is allowed to sign. diff --git a/step-ca/provisioners.mdx b/step-ca/provisioners.mdx index 0208985a..1c942a38 100644 --- a/step-ca/provisioners.mdx +++ b/step-ca/provisioners.mdx @@ -1,8 +1,8 @@ --- -updated_at: July 09, 2025 +updated_at: September 17, 2025 title: Configuring `step-ca` Provisioners -html_title: Configuring open source step-ca Provisioners -description: Learn how to configure step-ca Provisioners +html_title: Configure Certificate Provisioners in Step-CA +description: Master step-ca provisioners for flexible certificate issuance. Support multiple authentication methods from OIDC to cloud metadata. --- diff --git a/step-ca/registration-authority-ra-mode.mdx b/step-ca/registration-authority-ra-mode.mdx index 96faffed..ea386df7 100644 --- a/step-ca/registration-authority-ra-mode.mdx +++ b/step-ca/registration-authority-ra-mode.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Registration Authority Mode -html_title: Link step-ca to an upstream signing CA using RA mode -description: Use RA Mode to link step-ca to an upstream signing CA +html_title: Configure Registration Authority Mode in Step-CA +description: Configure step-ca as a Registration Authority. Separate certificate issuance from signing for enhanced security architecture. --- Some PKI topologies rely on one or more Registration Authority (RA) servers. diff --git a/step-ca/revocation.mdx b/step-ca/revocation.mdx index 62b02fba..5ce475c1 100644 --- a/step-ca/revocation.mdx +++ b/step-ca/revocation.mdx @@ -1,6 +1,8 @@ --- -updated_at: August 19, 2025 +updated_at: September 17, 2025 title: Certificate Revocation +html_title: Certificate Revocation Management in Step-CA +description: Implement certificate revocation in step-ca. Support CRL and OCSP for comprehensive certificate lifecycle management and security. --- The hardware, software and policies for managing and distributing public keys and certificates is called Public Key Infrastructure (PKI). diff --git a/step-ca/templates.mdx b/step-ca/templates.mdx index c09d508e..3df4dda6 100644 --- a/step-ca/templates.mdx +++ b/step-ca/templates.mdx @@ -1,8 +1,8 @@ --- title: Configuring `step-ca` Templates -html_title: Configuring open source step-ca Templates -description: Learn how to configure step-ca Templates -updated_at: April 03, 2025 +html_title: Certificate Template Reference for Step-CA +description: Create and manage certificate templates in step-ca. Customize certificate attributes for specific use cases and compliance requirements. +updated_at: September 17, 2025 --- People use private CAs for all sorts of things, in many different contexts: diff --git a/step-ca/webhooks.mdx b/step-ca/webhooks.mdx index d497c510..aee0e807 100644 --- a/step-ca/webhooks.mdx +++ b/step-ca/webhooks.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Webhooks -html_title: Webhooks -description: Webhooks augment the data available to certificate templates +html_title: Configure Certificate Webhooks in Step-CA +description: Implement webhooks in step-ca for richer certificates. Integrate external data sources and automate certificate workflows with custom logic. --- diff --git a/step-cli/README.mdx b/step-cli/README.mdx index dcf2dfee..624079bc 100644 --- a/step-cli/README.mdx +++ b/step-cli/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: "`step` CLI" -html_title: step CLI -description: step CLI +html_title: Step CLI Complete Documentation Reference +description: Complete step CLI documentation. Command-line toolkit for certificates, cryptography, and identity management operations reference guide. cta: text: Install `step` icon: ToolsIcon diff --git a/step-cli/basic-crypto-operations.mdx b/step-cli/basic-crypto-operations.mdx index abef32ab..9998d468 100644 --- a/step-cli/basic-crypto-operations.mdx +++ b/step-cli/basic-crypto-operations.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Basic Crypto Operations Using `step` -html_title: Basic Crypto Operations Using `step` -description: Basic Crypto Operations Using `step` +html_title: Basic Cryptographic Operations Complete Guide +description: Perform essential cryptographic operations using step CLI. Generate keys, create certificates, and manage secure communications. --- diff --git a/step-cli/installation.mdx b/step-cli/installation.mdx index 6c210d1f..8921ccf3 100644 --- a/step-cli/installation.mdx +++ b/step-cli/installation.mdx @@ -1,8 +1,8 @@ --- -updated_at: April 08, 2025 +updated_at: September 17, 2025 title: Install step -html_title: Installing open source step command -description: Learn how to install the step command +html_title: Install Step CLI on Any Platform Guide +description: Install step CLI on any platform. Quick setup instructions for the command-line tool for certificates and cryptography with easy installation. --- It's trivial to install the `step` binary on your local machine. diff --git a/step-cli/the-step-command.mdx b/step-cli/the-step-command.mdx index 143d4eef..e56842c2 100644 --- a/step-cli/the-step-command.mdx +++ b/step-cli/the-step-command.mdx @@ -1,8 +1,8 @@ --- +updated_at: September 17, 2025 title: The `step` Command -html_title: The `step` Command -description: The `step` Command - +html_title: The Step Command Complete Overview Guide +description: Master the step command for certificate operations. Core concepts and usage patterns for effective CLI certificate management. --- diff --git a/tutorials/README.mdx b/tutorials/README.mdx index 0d89387f..8822a80c 100644 --- a/tutorials/README.mdx +++ b/tutorials/README.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Open Source PKI Tutorials -html_title: PKI tutorials use open source to learn by doing -description: +html_title: Security Tutorials Collection for PKI +description: Comprehensive PKI and security tutorials from Smallstep. Learn certificate management, device identity, and Zero Trust implementation. Learn how to set up open source private PKI to issue certificates using ACME or cloud APIs. Issue X.509 certificates to humans using your identity provider. diff --git a/tutorials/acme-protocol-acme-clients.mdx b/tutorials/acme-protocol-acme-clients.mdx index 944ad9c6..18908077 100644 --- a/tutorials/acme-protocol-acme-clients.mdx +++ b/tutorials/acme-protocol-acme-clients.mdx @@ -1,8 +1,8 @@ --- -updated_at: May 19, 2025 +updated_at: September 17, 2025 title: Configure popular ACME clients to use a private CA with the ACME protocol -html_title: Configure ACME clients to use a private CA with the ACME protocol -description: Connect popular ACME clients to a private ACME server with this ACME protocol client configuration tutorial. +html_title: Configure ACME Clients with Step-CA Tutorial +description: Configure popular ACME clients with step-ca. Support for Certbot, acme.sh, and other ACME implementations for automated certificate management. --- The Automated Certificate Management Environment (ACME) protocol radically simplifies TLS deployment. diff --git a/tutorials/apple-mdm-jamf-setup-guide.mdx b/tutorials/apple-mdm-jamf-setup-guide.mdx index c12540b1..7c3fb045 100644 --- a/tutorials/apple-mdm-jamf-setup-guide.mdx +++ b/tutorials/apple-mdm-jamf-setup-guide.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Deploy EAP-TLS Wi-Fi certificates to Apple devices with Smallstep and Jamf Pro -html_title: Deploy EAP-TLS Wi-Fi certificates to Apple devices with Smallstep and Jamf Pro -description: This tutorial focuses on deploying client certificates for use with EAP-TLS to your devices via Jamf Pro and your Smallstep Authority. +html_title: Deploy EAP-TLS to Apple Devices via Jamf +description: Configure EAP-TLS Wi-Fi certificates for Apple devices using Jamf MDM. Complete guide for iOS and macOS wireless security deployment at scale. --- ## Introduction diff --git a/tutorials/browser-certificate-setup-guide.mdx b/tutorials/browser-certificate-setup-guide.mdx index 99bf0984..969a3ce9 100644 --- a/tutorials/browser-certificate-setup-guide.mdx +++ b/tutorials/browser-certificate-setup-guide.mdx @@ -1,8 +1,8 @@ --- title: Configure Web Browser Certificates -updated_at: April 24, 2025 -html_title: Configure your web browsers to use Smallstep hardware-bound device identtiy certificates. -description: This tutorial describes how to set up web browsers to access resources using mutual TLS and Smallstep certificates. +updated_at: September 17, 2025 +html_title: Browser mTLS Certificate Setup Tutorial +description: Configure browser certificates for mutual TLS authentication. Enable secure web access with client certificates across all browsers. --- ## Introduction diff --git a/tutorials/cloud-vm-certificate.mdx b/tutorials/cloud-vm-certificate.mdx index cf13295e..7769dc22 100644 --- a/tutorials/cloud-vm-certificate.mdx +++ b/tutorials/cloud-vm-certificate.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Use the AWS, GCP, or Azure metadata API to issue X.509 cloud VM certificates to workloads -html_title: Use the cloud metadata APIs to issue SSL/TLS certificates to workloads -description: Use the AWS, GCP, or Azure cloud metadata API to get private PKI certificates to workloads running on cloud virtual machines (VMs) +html_title: Automate Cloud VM Certificates with Step-CA +description: Automate certificates for cloud VMs using metadata APIs. Secure AWS, GCP, and Azure instances with automated identity and Zero Trust access. --- diff --git a/tutorials/connect-intune-to-smallstep.mdx b/tutorials/connect-intune-to-smallstep.mdx index 3f56cd7a..41f63ee1 100644 --- a/tutorials/connect-intune-to-smallstep.mdx +++ b/tutorials/connect-intune-to-smallstep.mdx @@ -1,8 +1,8 @@ --- -updated_at: July 09, 2025 +updated_at: September 17, 2025 title: Connect Intune to Smallstep -html_title: Connect Intune to Smallstep -description: Configure Intune to deploy the Smallstep Agent and distribute certificates and configuration to Mac clients. +html_title: Connect Microsoft Intune to Smallstep Tutorial +description: Connect Microsoft Intune to Smallstep for Windows device identity. Step-by-step guide for enterprise device trust with MDM integration. --- Smallstep can integrate with Microsoft Intune to synchronize your device inventory, to excahnge SCEP tokens, and to enroll your fleet with Smallstep using the Smallstep Agent. A SCEP token is a single-use password that's used by devices to get a certificate from Smallstep for bootstrapping. diff --git a/tutorials/connect-jamf-pro-to-smallstep.mdx b/tutorials/connect-jamf-pro-to-smallstep.mdx index 37190f87..cdef5565 100644 --- a/tutorials/connect-jamf-pro-to-smallstep.mdx +++ b/tutorials/connect-jamf-pro-to-smallstep.mdx @@ -1,8 +1,8 @@ --- -updated_at: August 21, 2025 +updated_at: September 17, 2025 title: Connect Jamf Pro to Smallstep -html_title: Connect Jamf Pro to Smallstep -description: Configure Jamf Pro to deploy the Smallstep Agent and distribute certificates and configuration to Mac clients. +html_title: Integrate Jamf Pro with Smallstep Tutorial +description: Integrate Jamf Pro with Smallstep for Apple device security. Complete guide for enforcing device trust in macOS and iOS environments. --- Smallstep can integrate with Jamf Pro to synchronize your device inventory, and enroll your fleet with Smallstep using the Smallstep Agent. In this document, we will configure your Jamf Pro instance for use with your Smallstep team. diff --git a/tutorials/connect-workspace-one-to-smallstep.mdx b/tutorials/connect-workspace-one-to-smallstep.mdx index bc1f70e6..d335e118 100644 --- a/tutorials/connect-workspace-one-to-smallstep.mdx +++ b/tutorials/connect-workspace-one-to-smallstep.mdx @@ -1,8 +1,8 @@ --- -updated_at: May 19, 2025 +updated_at: September 17, 2025 title: Connect Workspace One UEM to Smallstep -html_title: Connect Workspace One to Smallstep -description: Configure Workspace One UEM to deploy the Smallstep Agent and distribute certificates and configuration to clients. +html_title: VMware Workspace ONE Integration Guide +description: Connect Workspace ONE UEM to Smallstep for unified device identity. Enterprise guide for cross-platform device security management. --- Smallstep can integrate with [Omnissa Workspace ONE UEM](https://www.omnissa.com/products/workspace-one-unified-endpoint-management/) to keep your device inventory in sync and to exchange SCEP tokens. A SCEP token is a single-use password that's used by devices to get a certificate from Smallstep. diff --git a/tutorials/docker-tls-certificate-authority.mdx b/tutorials/docker-tls-certificate-authority.mdx index 58daeed4..c85fe0a2 100644 --- a/tutorials/docker-tls-certificate-authority.mdx +++ b/tutorials/docker-tls-certificate-authority.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Run a private online TLS certificate authority in a Docker container -html_title: Run a private online TLS certificate authority in a Docker container -description: Learn how to easily bootstrap a private certificate authority in a Docker container and use mTLS for all your services. +html_title: Run Step-CA in Docker Container Tutorial +description: Run step-ca certificate authority in Docker. Containerized PKI deployment for modern infrastructure environments with easy scalability options. --- diff --git a/tutorials/intermediate-ca-new-ca.mdx b/tutorials/intermediate-ca-new-ca.mdx index 8eec62f2..3dab0a50 100644 --- a/tutorials/intermediate-ca-new-ca.mdx +++ b/tutorials/intermediate-ca-new-ca.mdx @@ -1,8 +1,8 @@ --- title: Use step-ca with your existing CA -html_title: Create an intermediate or subordinate CA from your existing PKI -description: Use open-source step-ca to extend and automate existing PKI with modern protocols (ACME, OIDC, and more). -updated_at: November 11, 2024 +html_title: Deploy Intermediate CA with Existing Root +description: Use step-ca as intermediate CA with existing infrastructure. Modernize PKI while preserving root certificate investments and trust chains. +updated_at: September 17, 2025 --- Need to extend or migrate from an existing CA to a Smallstep CA? diff --git a/tutorials/intune-mdm-setup-guide.mdx b/tutorials/intune-mdm-setup-guide.mdx index 0d73233c..1d1d3cb1 100644 --- a/tutorials/intune-mdm-setup-guide.mdx +++ b/tutorials/intune-mdm-setup-guide.mdx @@ -1,8 +1,8 @@ --- -updated_at: March 26, 2025 +updated_at: September 17, 2025 title: Deploy EAP-TLS Wi-Fi certificates to Windows devices with Smallstep and Intune -html_title: Deploy EAP-TLS Wi-Fi certificates to Windows devices with Smallstep and Intune -description: In this tutorial, you will configure Smallstep and Microsoft Intune to establish device trust with your CA and to issue a Wi-Fi certificate to your devices. +html_title: Deploy EAP-TLS Wi-Fi to Windows via Intune +description: Configure EAP-TLS Wi-Fi certificates for Windows devices using Intune MDM. Enterprise guide for secure wireless network access. --- diff --git a/tutorials/keycloak-oidc-provisioner.mdx b/tutorials/keycloak-oidc-provisioner.mdx index 86143cfa..ac3c72a9 100644 --- a/tutorials/keycloak-oidc-provisioner.mdx +++ b/tutorials/keycloak-oidc-provisioner.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Use Keycloak to issue user certificates with step-ca -html_title: Use Keycloak to issue user certificates with step-ca -description: Let's set up Keycloak as an OpenID Connect (OIDC) provider for step-ca's OIDC provisioner +html_title: Keycloak OIDC Integration Complete Guide +description: Configure Keycloak as OIDC provisioner for step-ca. Enable enterprise SSO for certificate issuance with identity provider integration. --- diff --git a/tutorials/kubernetes-acme-ca.mdx b/tutorials/kubernetes-acme-ca.mdx index 10688361..a149d200 100644 --- a/tutorials/kubernetes-acme-ca.mdx +++ b/tutorials/kubernetes-acme-ca.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Integrate Kubernetes cert-manager with an internal ACME CA -html_title: Integrate Kubernetes cert-manager with an internal ACME CA -description: Use step-ca, ACME, and cert-manager to deploy automated, short-lived certificates for your Kubernetes cluster. +html_title: Kubernetes ACME CA Integration Tutorial +description: Deploy ACME-enabled CA in Kubernetes clusters. Automate certificate management with native Kubernetes integration and step-ca. --- diff --git a/tutorials/mutual-tls-aws.mdx b/tutorials/mutual-tls-aws.mdx index 603f12ad..3a4540a6 100644 --- a/tutorials/mutual-tls-aws.mdx +++ b/tutorials/mutual-tls-aws.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: "Mutual TLS advanced example: Use AWS to deploy a private certificate authority and secure microservices" -html_title: mutual tls example using certificate authority in AWS -description: Use AWS to deploy a private certificate authority and set of microservices and learn about mutual tls. End-to-end example including Terraform templates. +html_title: Deploy mTLS on AWS for Microservices Tutorial +description: Deploy private CA on AWS for microservice security. Implement mutual TLS between services in cloud environments for Zero Trust architectures. --- diff --git a/tutorials/rsa-chain.mdx b/tutorials/rsa-chain.mdx index e4808b53..cc07c661 100644 --- a/tutorials/rsa-chain.mdx +++ b/tutorials/rsa-chain.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Configure step-ca with an RSA certificate chain -html_title: Create a root and intermediate CA chain that uses RSA keys -description: Configure step-ca with an RSA certificate chain to create a root and intermediate CA chain that uses RSA keys. +html_title: Configure RSA Certificate Chain Tutorial +description: Set up RSA certificate chains with step-ca. Complete guide for RSA-based PKI implementation with proper chain configuration. --- ## Introduction diff --git a/tutorials/user-authentication.mdx b/tutorials/user-authentication.mdx index 42d97bbb..4cb119b1 100644 --- a/tutorials/user-authentication.mdx +++ b/tutorials/user-authentication.mdx @@ -1,7 +1,8 @@ --- +updated_at: September 17, 2025 title: Connect your identity provider and issue X.509 certificates for user authentication to services -html_title: Use single sign-on for TLS user authentication to services and workloads -description: Use single sign-on and MFA for user authentication to services and workloads. Connect your existing identity provider and authenticated issue X.509 certificates +html_title: IdP Integration for X.509 Certificates +description: Connect identity providers to issue X.509 certificates. Bridge user authentication with certificate-based access for unified identity management. --- diff --git a/tutorials/vpn-setup-guide-azure-vng.mdx b/tutorials/vpn-setup-guide-azure-vng.mdx index 1c72202f..7945790c 100644 --- a/tutorials/vpn-setup-guide-azure-vng.mdx +++ b/tutorials/vpn-setup-guide-azure-vng.mdx @@ -1,8 +1,8 @@ --- title: Configure Azure Virtual Network Gateway VPN with Smallstep -updated_at: June 11, 2024 -html_title: How to configure an Azure VPN server to use Smallstep for client and server certificate authentication -description: This tutorial describes how to configure Smallstep with an Azure VPN for a high-security, certificate-based VPN access +updated_at: September 17, 2025 +html_title: Azure VPN Gateway Certificate Setup Guide +description: Configure Azure Virtual Network Gateway VPN with certificates. Secure cloud connectivity using Smallstep device identity platform. --- This tutorial describes how to deploy and configure an Azure Virtual Network Gateway for certificate-based IPSec IKEv2 VPN authentication with Smallstep. diff --git a/tutorials/vpn-setup-guide-f5.mdx b/tutorials/vpn-setup-guide-f5.mdx index 4aa371f1..cc11c938 100644 --- a/tutorials/vpn-setup-guide-f5.mdx +++ b/tutorials/vpn-setup-guide-f5.mdx @@ -1,8 +1,8 @@ --- title: Configure F5 SSL VPN with Smallstep -updated_at: June 11, 2024 -html_title: How to configure an F5 VPN to use Smallstep for client and server certificate authentication -description: This tutorial describes how to configure Smallstep with an F5 VPN server for a high-security, certificate-based access +updated_at: September 17, 2025 +html_title: F5 VPN Certificate Configuration Tutorial +description: Configure F5 BIG-IP SSL VPN with Smallstep certificates. Enterprise guide for secure remote access using certificate authentication. --- This tutorial describes how to configure an F5 VPN server for certificate-based authentication with Smallstep. diff --git a/tutorials/vpn-setup-guide-strongswan.mdx b/tutorials/vpn-setup-guide-strongswan.mdx index 05b58d23..c5b5bdbd 100644 --- a/tutorials/vpn-setup-guide-strongswan.mdx +++ b/tutorials/vpn-setup-guide-strongswan.mdx @@ -1,8 +1,8 @@ --- title: Configure strongSwan VPN With Smallstep -updated_at: June 11, 2024 -html_title: How to configure strongSwan to use Smallstep for client and server certificate authentication -description: This tutorial describes how to configure Smallstep with strongSwan for a high-security, certificate-based VPN server +updated_at: September 17, 2025 +html_title: StrongSwan VPN with Certificates Guide +description: Configure StrongSwan VPN using Smallstep certificates. Secure remote access with certificate-based authentication for enterprises. --- This configuration was tested with strongSwan 5.9.13. diff --git a/tutorials/vpn-setup-guide.mdx b/tutorials/vpn-setup-guide.mdx index d6cbbe27..af256b80 100644 --- a/tutorials/vpn-setup-guide.mdx +++ b/tutorials/vpn-setup-guide.mdx @@ -1,8 +1,8 @@ --- title: Configure Your VPN Server For Certificate-Based VPN With Smallstep -updated_at: June 11, 2024 -html_title: How to configure common VPN servers to use Smallstep for client and server certificate authentication -description: This tutorial describes how to configure Smallstep with VPN servers for a high-security, certificate-based VPN server +updated_at: September 17, 2025 +html_title: Configure VPN with Certificates Tutorial +description: Set up certificate-based VPN authentication with step-ca. Replace passwords with secure device certificates for enhanced remote access control. --- This tutorial describes how to configure your VPN server for certificate-based authentication with Smallstep.