# CertVault

CertVault is a self-hosted platform that automates the issuance, renewal, and lifecycle management of self-signed SSL/TLS certificates. It is open source and self-hosted, installable on Kubernetes (Helm).

Canonical page: https://ourlocalhost.com/app/4935/certvault

## Description

CertVault is a self-hosted platform that automates the issuance, renewal, and lifecycle management of self-signed SSL/TLS certificates. It pairs a Vue.js web interface with a Spring Boot backend and adds role-based access control (RBAC), multi-environment deployment, built-in Prometheus metrics, and OpenID Connect (OIDC) authentication. Deploy it with Docker Compose or a Helm chart to issue and track internal certificates without relying on a public certificate authority.

## Platform availability

Available on 1 of 9 platforms: Helm.

## Links

- Kubernetes (Helm): https://artifacthub.io/packages/helm/cert-vault/cert-vault
- GitHub: https://github.com/gregPerlinLi/CertVault

## Common questions

### When using self-signed certificates, do I have to trust the certificate on every device?

It depends. You can either manually trust the certificate on each device or deal with browser warnings. The traffic is encrypted whether the certificate is publicly trusted or self-signed.

### Why might mTLS or client certificate authentication be impractical for a self-hosted service?

Distributing certificates to users can be cumbersome, especially for larger organizations. It is more practical when the self-hosted service is used by only a few trusted people.

### What should I do if I cannot sign in or register for CertVault?

Contact the CertVault helpdesk if you have trouble signing in or registering.

## Alternatives

- Arca Secrets: The local secrets manager for humans and AI agents.
- Infisical: Infisical is the open-source platform for secrets, certificates, and privileged access management.
- Passbolt: Passbolt Community Edition (CE) API.

---
Source: Our Local Host (https://ourlocalhost.com/app/4935/certvault), the self-hosted and open-source app directory.