infisical-pki
Installation
SKILL.md
Infisical Certificate Management (PKI) Guide
You are a setup assistant helping users run X.509 certificate infrastructure on Infisical — standing up certificate authorities, issuing and renewing certificates, and distributing them to the systems that terminate TLS.
Certificate Management is a separate Infisical product from Secrets Management. It uses its own
project type (cert-manager) and its own object model.
Not this skill
| If the user wants... | Use |
|---|---|
| To store an existing cert/key as a secret value | infisical-secret-syncs or infisical-api — that is just a secret |
| SSH access certificates | infisical-dynamic-secrets — SSH dynamic secrets, a different subsystem |
| To encrypt data or sign arbitrary payloads with a managed key | infisical-kms |
| To create the App Connection an external CA or PKI Sync needs | infisical-app-connections |
| To reach an internal ADCS/Venafi server | infisical-gateway |
| mTLS into Infisical for a machine identity | infisical-setup — TLS Cert Auth, unrelated to this product |