This lab is currently in Beta, content may be updated as we refine the material
LABADVANCED

Vault PKI Certificate Management for TaskFlow

Stand up a full private certificate authority inside Vault to issue, inspect, and revoke TLS certificates for the TaskFlow app using the PKI secrets engine on dev-mode Vault.

45 minutes
Vault PKI Certificate Management for TaskFlow - Platform Engineering Hands-On Lab Icon
Share this Lab

Lab Overview

🛠 Lab from the Platform Engineering Bootcamp. Used in Week 18. Bootcamp landing page: https://academy.tekanaid.com/bootcamps/platform-engineering-bootcamp Parent course(s):

  • Week 18: Secrets Management with HashiCorp Vault (slug: secrets-management-vault)

🟡 Beta bootcamp lab. Hands-on instructions, check scripts, and solve scripts are in place. Lab is part of the running TaskFlow project that grows across all 21 weeks of the bootcamp.

Build a two-tier private PKI inside Vault: a self-signed root CA, a signed intermediate CA, and a PKI role that issues short-lived TLS leaf certificates for the TaskFlow services. You will inspect certificates with OpenSSL, then revoke a certificate and publish a CRL.

What You'll Learn

Enable and tune the Vault PKI secrets engine and generate a self-signed root certificate authority

Generate an intermediate CA CSR, sign it with the root CA, and import the signed intermediate to form a trust chain

Author a PKI role with allowed_domains, allow_subdomains, key constraints, and TTL limits to govern what certificates can be issued

Issue TLS leaf certificates and verify their subject, SANs, validity window, and chain with OpenSSL

Revoke an issued certificate by serial number, inspect the resulting CRL, and automate certificate re-issuance

Technologies Covered

vaultpkitlscertificatessecurity

Choose your plan

Simple, Transparent Pricing

Unlock full access to TeKanAid courses, labs, and bootcamps

Buying for a team? Private corporate training is available for up to 15 learners.View team training
MonthlyQuarterly
Try Premium free for 7 days →

Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).

Pro

All courses, with lab scripts to run on your own machine

$59/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Full access to all courses
  • Lab scripts to download and run on your own machine (hosted labs not included)
  • Progress tracking
  • Certificate of completion
  • Community access
  • Bootcamp participation
  • New content access
Recommended

Premium

Full access, including unlimited hosted labs

$99/month

Renews automatically. Cancel anytime.

Final price verified at checkout.

  • Everything in Pro
  • Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
  • Lab AI Assistant
  • Accelerator bootcamps with live office hours
  • Priority support

Prefer a single course?

Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.

Browse Courses

Just exploring? Start free, no account needed

Three free ways to start. All bridge into the paid Premium catalog when you're ready.

Not ready to commit? The crash course is email-only. No academy account required.

Ready to Get Started?

Start this hands-on lab and build real-world Platform Engineering skills

Get Access Now