Can we use PKI with community edition of Vault?

Folks – we’ve been using the community edition of Vault for a while to store secrets, etc… However, now we would like to have our own internal Root CA with certs issued via ACME, which I believe can be done with the PKI secrets engine (see PKI secrets engine | Vault | HashiCorp Developer).

However, I’ve done some searching, and it is not clear to me whether or not this is something that can be done with the community edition of Vault, or if it requires the Enterprise edition. Can someone point me at the documentation that I have missed on this subject?

Thanks!

Hi @bknowles

You can use PKI with community. For reference, any features that are enterprise only should have a callout on the page, as well as in the left nav (look below the link you sent at CIEPS - has the ENT label)

1 Like

Much appreciated! I did just find the earlier article at HC Vault Community Edition utilities - #2 by jonathanfrappier which implies the same thing, but I appreciate the confirmation!

1 Like