update pki enrollment method, cert images

This commit is contained in:
Tuan Dang
2025-11-06 17:10:52 -08:00
parent f015683b81
commit 34eede1f17
11 changed files with 7 additions and 5 deletions

View File

@@ -68,16 +68,16 @@ In the following steps, we explore how to revoke a X.509 certificate and obtain
selecting the **Revoke Certificate** option for it and specifying the reason
for revocation.
![pki revoke certificate](/images/platform/pki/cert-revoke.png)
![pki revoke certificate](/images/platform/pki/certificate/cert-revoke.png)
![pki revoke certificate modal](/images/platform/pki/cert-revoke-modal.png)
![pki revoke certificate modal](/images/platform/pki/certificate/cert-revoke-modal.png)
</Step>
<Step title="Obtaining a CRL">
In order to check the revocation status of a certificate, you can check it
against the CRL of a CA by heading to its Issuing CA and downloading the CRL.
![pki view crl](/images/platform/pki/ca-crl.png)
![pki view crl](/images/platform/pki/ca/ca-crl.png)
To verify a certificate against the
downloaded CRL with OpenSSL, you can use the following command:

View File

@@ -29,15 +29,17 @@ In the following steps, we explore how to issue a X.509 certificate using the AP
<Step title="Issue a certificate">
To create a certificate, head to your Project > Certificates > Certificates and press **Issue**.
TODO: Image
![pki certificates](/images/platform/pki/certificate/cert-issue.png)
Here, select the certificate profile from step 1 that will be used to issue the certificate and fill out the rest of the details for the certificate to be issued.
![pki certificate issue modal](/images/platform/pki/certificate/cert-issue-modal.png)
</Step>
<Step title="Download the certificate details">
Once you have created the certificate from step 1, you'll be presented with the certificate details including the **Certificate Body**, **Certificate Chain**, and **Private Key**.
TODO: Image
![pki certificate body](/images/platform/pki/certificate/cert-body.png)
<Note>
Make sure to download and store the **Private Key** in a secure location as it