Dokumentasi Certificate Authority Service
Certificate Authority Service adalah layanan Google Cloud yang sangat tersedia dan skalabel yang memungkinkan Anda menyederhanakan, mengotomatiskan, dan menyesuaikan deployment, pengelolaan, dan pengamanan certificate authority (CA) pribadi.
Mulai bukti konsep Anda dengan kredit gratis senilai $300
-
Mendapatkan akses ke Gemini 2.0 Flash Thinking
-
Penggunaan bulanan gratis untuk produk populer, termasuk AI API dan BigQuery
-
Tidak ada biaya otomatis, tanpa komitmen
Terus jelajahi dengan lebih dari 20 produk yang selalu gratis
Akses 20+ produk gratis untuk kasus penggunaan umum, termasuk API AI, VM, data warehouse, dan lainnya.
Pelatihan
Pelatihan dan tutorial
Menerbitkan sertifikat menggunakan konsol Google Cloud
Pelajari cara mengaktifkan Certificate Authority Service API, membuat kumpulan CA, membuat CA root, dan menerbitkan sertifikat dari CA root.
Pelatihan
Pelatihan dan tutorial
Mengelola kontrol kebijakan
Kontrol kebijakan memungkinkan Anda mengontrol jenis sertifikat yang dapat dikeluarkan oleh kumpulan CA Anda. Tutorial ini menjelaskan cara mengelola berbagai kebijakan untuk mengontrol penerbitan sertifikat dan akses ke resource CA Service.
Kasus penggunaan
Kasus penggunaan
Integrasi CA Hashicorp Vault
Hashicorp Vault biasanya digunakan untuk mengelola dan menyimpan secret di lokal. Topik ini menjelaskan cara mengonfigurasi CA Hashicorp Vault agar bertindak sebagai proxy yang meneruskan semua permintaan penerbitan sertifikat ke Certificate Authority Service. Integrasi ini memungkinkan solusi yang saat ini di-deploy berfungsi secara native dengan Layanan CA.
Hashicorp
On-premise
Secrets
Kasus penggunaan
Kasus penggunaan
Menerapkan OCSP responder yang didelegasikan
Menggunakan OCSP untuk memberikan status pencabutan sertifikat dapat memberikan banyak manfaat. Manfaat ini mencakup waktu respons yang lebih cepat dan persyaratan bandwidth jaringan yang lebih kecil, dibandingkan dengan Daftar Pencabutan Sertifikat (CRL), yang bisa menjadi sangat besar. Halaman ini memberikan informasi tentang cara mengonfigurasi OCSP responder yang didelegasikan yang berfungsi dengan Layanan CA.
OCSP
Keamanan
Kasus penggunaan
Kasus penggunaan
Terraform adalah alat open source populer yang memungkinkan Anda membuat dan mengelola resource Certificate Authority Service menggunakan paradigma infrastruktur sebagai kode. Panduan ini memberikan informasi tentang penggunaan Terraform dengan Layanan CA.
Terraform
CA Service API
Kasus penggunaan
Kasus penggunaan
Mengelola siklus proses sertifikat menggunakan Cert-Manager
Cert-Manager adalah add-on Kubernetes untuk mengotomatiskan pengelolaan dan penerbitan sertifikat TLS dari berbagai sumber penerbitan. Anda dapat menggunakan Cert-Manager untuk mengelola siklus proses sertifikat yang diterbitkan oleh CA yang dibuat menggunakan CA Service. Cert-Manager memastikan sertifikat valid dan diperpanjang dengan semestinya sebelum masa berlakunya habis.
Cert-Manager
Perpanjangan sertifikat
Kasus penggunaan
Kasus penggunaan
Menggunakan Certificate Authority Service dengan Anthos Service Mesh
CA Service memungkinkan Anda meminta sertifikat identitas beban kerja dari certificate authority (CA) yang Anda kontrol. Dokumen ini menjelaskan cara menginstal Anthos Service Mesh dan menggunakan Certificate Authority Service dengannya.
Anthos Service Mesh
Kasus penggunaan
Kasus penggunaan
Menyiapkan keamanan layanan Traffic Director dengan Envoy
Pelajari cara menyiapkan keamanan layanan untuk Traffic Director dengan Envoy dan Certificate Authority Service.
Traffic Director
Envoy
Kasus penggunaan
Kasus penggunaan
Menyiapkan keamanan layanan Traffic Director dengan gRPC tanpa proxy
Pelajari cara menyiapkan keamanan layanan untuk Traffic Director dengan gRPC tanpa proxy dan Certificate Authority Service.
Traffic Director
gRPC tanpa proxy
Kasus penggunaan
Kasus penggunaan
Cara men-deploy PKI yang aman dan andal dengan Certificate Authority Service
Laporan resmi ini memberikan rekomendasi keamanan dan arsitektur kepada organisasi untuk penggunaan Layanan CA. Dokumen ini menjelaskan konsep penting untuk mengamankan dan men-deploy PKI serta memberikan rekomendasi khusus untuk mengonfigurasi CA Service guna memastikan ketersediaan operasional yang tinggi.
Desain PKI
Kasus penggunaan
Kasus penggunaan
Menskalakan pengelolaan sertifikat dengan Certificate Authority Service
Dokumen teknis ini menjelaskan cara CA Service mengatasi tantangan yang dihadapi organisasi saat menggunakan sertifikat digital di dunia digital yang berubah dengan cepat dan saling terhubung.
IoT
Cloud computing
Kasus penggunaan
Kasus penggunaan
Praktik terbaik untuk Certificate Authority Service
Topik ini memberikan praktik terbaik untuk menggunakan Layanan CA secara lebih efektif.
Kontrol akses
Kunci penandatanganan
Tingkatan Layanan CA
Contoh kode
Contoh Kode
Klien Certificate Authority Service untuk Go
Contoh yang menggunakan klien idiomatik Go untuk Certificate Authority Service.
Contoh kode
Contoh Kode
Klien Certificate Authority Service untuk Java
Contoh yang menggunakan klien idiomatis Java untuk Certificate Authority Service.
Contoh kode
Contoh Kode
Klien Certificate Authority Service untuk Python
Contoh yang menggunakan klien idiomatis Python untuk Certificate Authority Service.
Kecuali dinyatakan lain, konten di halaman ini dilisensikan berdasarkan Lisensi Creative Commons Attribution 4.0, sedangkan contoh kode dilisensikan berdasarkan Lisensi Apache 2.0. Untuk mengetahui informasi selengkapnya, lihat Kebijakan Situs Google Developers. Java adalah merek dagang terdaftar dari Oracle dan/atau afiliasinya.
Terakhir diperbarui pada 2025-08-12 UTC.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-12 UTC."],[[["\u003cp\u003eCertificate Authority Service is a Google Cloud service that simplifies and automates the management and security of private certificate authorities.\u003c/p\u003e\n"],["\u003cp\u003eThe documentation offers guides on various aspects, including creating CA pools, root CAs, subordinate CAs, and certificate templates, as well as configuring IAM policies.\u003c/p\u003e\n"],["\u003cp\u003eReference materials are available for authentication, RPC/REST APIs, gcloud commands, gRPC, certificate profiles, and RFC compliance.\u003c/p\u003e\n"],["\u003cp\u003eThe resources section contains information such as pricing, quotas, locations, release notes, known limitations, and the service level agreement.\u003c/p\u003e\n"],["\u003cp\u003eThere are various use cases and whitepapers detailed, including integrations with Hashicorp Vault, Terraform, and Cert-Manager, along with best practices, security recommendations, and code samples.\u003c/p\u003e\n"]]],[],null,["# Certificate Authority Service documentation\n===========================================\n\n[Read product documentation](/certificate-authority-service/docs/ca-service-overview)\nCertificate Authority Service is a highly available and scalable Google Cloud service that\nenables you to simplify, automate, and customize the deployment, management,\nand security of private certificate authorities (CA).\n[Get started for free](https://console.cloud.google.com/freetrial) \n\n#### Start your proof of concept with $300 in free credit\n\n- Get access to Gemini 2.0 Flash Thinking\n- Free monthly usage of popular products, including AI APIs and BigQuery\n- No automatic charges, no commitment \n[View free product offers](/free/docs/free-cloud-features#free-tier) \n\n#### Keep exploring with 20+ always-free products\n\n\nAccess 20+ free products for common use cases, including AI APIs, VMs, data warehouses,\nand more.\n\nDocumentation resources\n-----------------------\n\nFind quickstarts and guides, review key references, and get help with common issues. \nformat_list_numbered\n\n### Guides\n\n-\n\n [Overview](/certificate-authority-service/docs/ca-service-overview)\n\n-\n\n [Configure IAM policies](/certificate-authority-service/docs/configuring-iam)\n\n-\n\n [Create a CA pool](/certificate-authority-service/docs/creating-ca-pool)\n\n-\n\n [Create a root CA](/certificate-authority-service/docs/creating-certificate-authorities)\n\n-\n\n [Create a subordinate CA](/certificate-authority-service/docs/create-subordinate-ca)\n\n-\n\n [Create a certificate template](/certificate-authority-service/docs/creating-certificate-template)\n\n-\n\n [Overview of policy controls](/certificate-authority-service/docs/policy-controls)\n\n-\n\n [Create a certificate request](/certificate-authority-service/docs/requesting-certificates)\n\n-\n\n [Increase certificate creation throughput using CA pools](/certificate-authority-service/docs/higher-qps)\n\nfind_in_page\n\n### Reference\n\n-\n\n [Authenticate to CA Service](/certificate-authority-service/docs/authentication)\n\n-\n\n [RPC APIs](/certificate-authority-service/docs/reference/rpc)\n\n-\n\n [REST APIs](/certificate-authority-service/docs/reference/rest)\n\n-\n\n [gcloud privateca commands](/sdk/gcloud/reference/privateca)\n\n-\n\n [Using gRPC](/certificate-authority-service/docs/using-grpc)\n\n-\n\n [Certificate profiles](/certificate-authority-service/docs/certificate-profile)\n\n-\n\n [RFC compliance](/certificate-authority-service/docs/rfc-compliance)\n\ninfo\n\n### Resources\n\n-\n\n [Security and compliance](/certificate-authority-service/docs/certificate-authority-compliance)\n\n-\n\n [Pricing](/certificate-authority-service/pricing)\n\n-\n\n [Quotas and limits](/certificate-authority-service/quotas)\n\n-\n\n [Locations](/certificate-authority-service/docs/locations)\n\n-\n\n [Release notes](/certificate-authority-service/docs/release-notes)\n\n-\n\n [Known limitations](/certificate-authority-service/docs/known-limitations)\n\n-\n\n [Service Level Agreement](/certificate-authority-service/sla)\n\n-\n\n [Getting support](/certificate-authority-service/docs/getting-support)\n\nRelated resources\n-----------------\n\nTraining and tutorials \nUse cases \nCode samples \nExplore self-paced training, use cases, reference architectures, and code samples with examples of how to use and connect Google Cloud services. Training \nTraining and tutorials\n\n### Issue a certificate using the Google Cloud console\n\n\nLearn how to enable the Certificate Authority Service API, create a CA pool, create a root CA, and issue certificates from the root CA.\n\n\n[Learn more](/certificate-authority-service/docs/create-certificate) \nTraining \nTraining and tutorials\n\n### Manage policy controls\n\n\nPolicy controls let you control the type of certificates that your CA pool can issue. This tutorial explains how you can manage various policies to control certificate issuance and access to CA Service resources.\n\n\n[Learn more](/certificate-authority-service/docs/tutorials/manage-policy-controls) \nUse case \nUse cases\n\n### Hashicorp Vault CA integration\n\n\nHashicorp Vault is commonly used for managing and storing secrets on-premises. This topic describes how Hashicorp Vault CA can be configured to act as a proxy that forwards all certificate issuance requests to Certificate Authority Service. This integration allows a currently deployed solution to natively work with CA Service.\n\nHashicorp On-premises Secrets\n\n\u003cbr /\u003e\n\n[Learn more](/certificate-authority-service/docs/hashicorp-integration) \nUse case \nUse cases\n\n### Implementing a delegated OCSP responder\n\n\nUsing OCSP to provide the certificate revocation status can have many benefits. These benefits include quicker response time and smaller requirement for network bandwidth, as compared to Certificate Revocation Lists (CRLs), which can get very large. This page provides information about configuring a delegated OCSP responder that works with CA Service.\n\nOCSP Security\n\n\u003cbr /\u003e\n\n[Learn more](/certificate-authority-service/docs/ocsp-support) \nUse case \nUse cases\n\n### Using Terraform\n\n\nTerraform is a popular open source tool that lets you create and manage your Certificate Authority Service resources using its infrastructure-as-code paradigm. This guide provides information about using Terraform with CA Service.\n\nTerraform CA Service APIs\n\n\u003cbr /\u003e\n\n[Learn more](/certificate-authority-service/docs/using-terraform) \nUse case \nUse cases\n\n### Manage certificate lifecycle using Cert-Manager\n\n\nCert-Manager is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources. You can use Cert-Manager to manage the lifecycle of certificates issued by CAs that are created using CA Service. Cert-Manager ensures certificates are valid and duly renewed before they expire.\n\nCert-Manager Certificate renewal\n\n\u003cbr /\u003e\n\n[Learn more](/certificate-authority-service/docs/cert-manager) \nUse case \nUse cases\n\n### Use Certificate Authority Service with Anthos Service Mesh\n\n\nCA Service lets you request workload identity certificates from a certificate authority (CA) that you control. This document explains how you can install Anthos Service Mesh and use Certificate Authority Service with it.\n\nAnthos Service Mesh\n\n\u003cbr /\u003e\n\n[Learn more](/service-mesh/docs/unified-install/install-anthos-service-mesh#install_ca_service) \nUse case \nUse cases\n\n### Set up Traffic Director service security with Envoy\n\n\nLearn how you can set up service security for Traffic Director with Envoy and Certificate Authority Service.\n\nTraffic Director Envoy\n\n\u003cbr /\u003e\n\n[Learn more](/traffic-director/docs/security-envoy-setup) \nUse case \nUse cases\n\n### Set up Traffic Director service security with proxyless gRPC\n\n\nLearn how you can set up service security for Traffic Director with proxyless gRPC and Certificate Authority Service.\n\nTraffic Director proxyless gRPC\n\n\u003cbr /\u003e\n\n[Learn more](/traffic-director/docs/security-proxyless-setup) \nUse case \nUse cases\n\n### How to deploy a secure and reliable PKI with Certificate Authority Service\n\n\nThis whitepaper provides security and architectural recommendations to organizations for the use of CA Service. It describes critical concepts to securing and deploying a PKI and provides specific recommendations for configuring CA Service to ensure high operational availability.\n\nPKI design\n\n\u003cbr /\u003e\n\n[Learn more](https://services.google.com/fh/files/misc/deploying_public_key_infrastructure_with_cas.pdf) \nUse case \nUse cases\n\n### Scaling certificate management with Certificate Authority Service\n\n\nThis whitepaper explains how CA Service addresses the challenges organizations face as they use digital certificates in a fast-changing and interconnected digital world.\n\nIoT Cloud computing\n\n\u003cbr /\u003e\n\n[Learn more](https://services.google.com/fh/files/misc/scaling_certificate_management_cas.pdf) \nUse case \nUse cases\n\n### Best practices for Certificate Authority Service\n\n\nThis topic provides the best practices to use CA Service more effectively.\n\nAccess control Signing keys CA Service tiers\n\n\u003cbr /\u003e\n\n[Learn more](/certificate-authority-service/docs/best-practices) \nCode sample \nCode Samples\n\n### Certificate Authority Service Client for Go\n\n\nSamples that use the Go idiomatic client for Certificate Authority Service.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/golang-samples/tree/main/privateca) \nCode sample \nCode Samples\n\n### Certificate Authority Service Client for Java\n\n\nSamples that use the Java idiomatic client for Certificate Authority Service.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/java-docs-samples/tree/main/privateca/snippets) \nCode sample \nCode Samples\n\n### Certificate Authority Service Client for Python\n\n\nSamples that use the Python idiomatic client for Certificate Authority Service.\n\n\n[Open GitHub\narrow_forward](https://github.com/GoogleCloudPlatform/python-docs-samples/tree/main/privateca/snippets)\n\nRelated videos\n--------------"]]
