===== OCI Certificate Authority =====
Process required to create an Oracle Cloud Infrastructure (OCI) private certificate authority.

{{tag>OCI}}

==== Process ====
Create dynamic group for certificate authorities

Create policy that allows certificate authority dynamic group to use vault keys

Create vault and RSA key for certificate authority

Create certificate authority

Use [[linux:openssl|OpenSSL]] to create certificate signing request (CSR)

Use certificate authority to sign CSR by creating certificate that is managed externally