myOwnCA By EnigmaIS

MYOWNCA / DOCUMENTATION

Your PKI, in detail.

The capabilities, architecture, and practical steps behind myOwnCA. Start with the full feature reference or put your first certificate to work.

A private CA you operate. myOwnCA manages requests, approvals, issuance, renewal, and revocation. Your devices and applications trust its certificates after you install the root certificate.

Explore the documentation

01 / REFERENCE

Full features

Certificate lifecycle, key protection, governance, and deployment capabilities.

02 / REFERENCE

Architecture

How the offline root, issuing CA, signing keys, and certificate workflows fit together.

03 / REFERENCE

Hardware & key protection

SmartCard-HSM, Nitrokey HSM, TrueRNG, cloud signing, and upcoming integrations.

04 / REFERENCE

Homelab guide

Build a lab trust chain and issue your first private HTTPS certificate.

05 / REFERENCE

Nginx guide

Serve HTTPS and require client certificates with certificates issued by myOwnCA.

06 / REFERENCE

Apache guide

Configure Apache HTTPS and mutual TLS with your own certificate authority.

Choose your starting point

Learning in a homelab

Use the homelab guide to create a Test/Lab hierarchy and understand trust distribution. Then secure a private web service with the Nginx or Apache guide. Free non-commercial use includes 10 active certificate identities. Every commercial use requires a paid license, regardless of capacity. Source inspection is permitted; source modifications and derivative versions are prohibited under both free and paid terms. Normal settings, supported APIs, and deployment configuration remain permitted. The launch licensing policy is a summary; full terms will accompany the first software distribution.

Evaluating an organizational deployment

Review the feature reference, the offline-root architecture, and key-storage options. Plan service URLs, network access, certificate policy, and recovery before issuing production certificates.

Getting the application

The public Docker image is being prepared. Contact EnigmaIS for evaluation access. The examples here assume access to a myOwnCA installation or an evaluation source checkout; they do not depend on an unpublished registry image.

Planning a deployment?

Talk to EnigmaIS