Xi

XiPKI on Ubuntu 24.04 LTS

Azure Security

XiPKI on Ubuntu 24.04, a high performance certificate authority for issuing and managing X.509 certificates.

Base
Hardened build
minimal ports, security patches applied at build time
Access
Unique credentials
generated on first boot, readable only by root
Verified
Boots working
services pass a health gate before release
Support
24/7, 365 days
by email and live chat, 24 hour response SLA

Overview

XiPKI is an open source Certificate Authority and PKI server. It issues, renews and revokes X.509 certificates through CMP, EST and REST enrolment protocols, and answers certificate status queries with a built in OCSP responder backed by a PostgreSQL certificate database.

Why the cloudimg image

cloudimg ships XiPKI fully patched on a hardened Ubuntu 24.04 base with the certificate authority, enrolment gateway and OCSP responder already running. Every instance generates its own certificate authority signing key, database password and enrolment credential on first boot, so no key material is shared between instances, every interface is bound to loopback by default, and the image is backed by 24/7 support.

Common uses

  • Private TLS certificate issuance
  • Device and machine identity enrolment
  • Certificate revocation and OCSP status