MENU
Which Vault secret engine may be used to build your own internal certificate authority?
25 comments · newest first
KE
Keena
11 months ago
PostgreSQL? No way, that's not right.
CH
Chanel
11 months ago
Wait, can you really use PKI for that? Sounds too easy!
HA
Harrison
11 months ago
PKI is the way to go for internal CAs.
TA
Tamesha
12 months ago
I thought it was Transit at first.
LO
Louis
12 months ago
Definitely PKI for that!
CA
Casie
1 year ago
I might be mixing things up, but I feel like PostgreSQL is more about database management than certificates.
RO
Rodolfo
1 year ago
Transit seems more related to encryption, so I don't think it's the right choice for a certificate authority.
LA
Launa
1 year ago
I remember practicing a question about Vault's secret engines, and PKI was definitely mentioned in that context.
JE
Jestine
1 year ago
I think the PKI secret engine is the one for building an internal certificate authority, but I'm not completely sure.
DE
Denny
1 year ago
I'm a little confused on this one. I know Vault has a lot of security features, but I can't recall the specific engine for building a CA. I'll have to review my notes and try to eliminate the wrong answers.
AL
Alease
1 year ago
Hmm, I'm a bit unsure on this one. I know Vault has a lot of different secret engines, but I can't remember which one is specifically for CAs. I'll have to think this through carefully.
GL
Glory
1 year ago
I'm pretty sure the answer is PKI, since that's the Vault secret engine used for building a custom certificate authority.
DA
Daryl
1 year ago
The PKI engine sounds right to me. That's the one that allows you to manage your own internal PKI infrastructure, including issuing certificates. I'm confident that's the answer.
TE
Terry
1 year ago
Hmm, I'm a bit confused. I'll need to review my notes on AWS Guard Duty to make sure I understand how it works.
IR
Irma
1 year ago
Okay, the Cable Communications Policy Act - I remember learning about that. Let me think through the options carefully and see if I can figure out the right requirement it specifies.
BR
Brandon
3 years ago
Hah, I bet the person who wrote this question is just trying to trip us up. They're probably hoping we'll get distracted by all the other shiny secret engine options.
TA
Tawny
3 years ago
Ha, true that. Gotta stay focused and not get too fancy. I'm going with B) PKI for this one.
BE
Bettina
3 years ago
Let's go with PKI then. It's a reliable option for sure.
EL
Elbert
3 years ago
I would also choose PKI for building an internal certificate authority.
DA
Dalene
3 years ago
Yeah, PKI is the most common choice for that purpose. Good call!
JA
Jacklyn
3 years ago
PKI is definitely the way to go for building an internal certificate authority.
SA
Sarina
3 years ago
I think PKI is the best option too. It's straightforward and secure.
LI
Lindsay
3 years ago
I agree, keeping it simple is key. PKI is a solid choice.
DI
Dick
3 years ago
Yeah, I agree. The PKI engine is the one that allows you to build your own internal certificate authority, right? I remember covering that in the training materials.
VA
Vallie
3 years ago
You know, you might be onto something there. Transit does have some certificate management capabilities. But I'm pretty confident the PKI engine is the one specifically designed for that purpose.