ACME Automation

Integrate ACME protocol with threshold-backed certificate issuance. Drop-in for certbot-style automation.

Implemented by

Run a CA without a single trusted key.

→ Product overview

Deploy, monitor, and operate threshold signing infrastructure.

→ Audience overview

Run a CA without a single trusted key.

→ Audience overview

1. Read the relevant product overview

Start with the product pages above for the architectural model.
2. Run the quickstart

Each product page has a 5-minute quickstart that runs locally.
3. Read the spec

Specs at /specs/PRODUCTS cover the protocol details.
4. Talk to us

Open a Discussion on GitHub tagged `evaluation-help`.

Replace a single-key HSM with T-of-N distributed signing. No single party can sign alone; compromising T-1 parties does not compromise the key.

Operate a certificate authority where the root key is split across multiple parties. Issue certifies requires T-of-N quorum.

Operate a national or industry PKI where the root of trust is held by a quorum of institutional parties rather than a single operator.

Sign build artifacts at release time using threshold keys held outside CI. Compromising CI does not compromise the signing key.