:_mod-docs-content-type: ASSEMBLY
[id="microshift-custom-ca"]
= Configuring custom certificate authorities
include::_attributes/attributes-microshift.adoc[]
:context: microshift-custom-ca

toc::[]

[role="_abstract"]
You can allow and encrypt connections with external clients by replacing the {microshift-short} default API server certificate with a custom server certificate issued by a certificate authority (CA).

include::modules/microshift-custom-ca-con.adoc[leveloffset=+1]

include::modules/microshift-custom-ca-proc.adoc[leveloffset=+1]

include::modules/microshift-custom-ca-reserved-names.adoc[leveloffset=+1]

include::modules/microshift-custom-ca-troubleshooting.adoc[leveloffset=+1]

include::modules/microshift-custom-ca-cert-cleaning.adoc[leveloffset=+1]

[id="Additional-resources_microshift-custom-ca_{context}"]
[role="_additional-resources"]
== Additional resources

* link:https://docs.redhat.com/en/documentation/openshift_container_platform/{ocp-version}/html/security_and_compliance/configuring-certificates#customize-certificates-api-add-named_api-server-certificates[OpenShift: Add an API server named certificate]

* link:https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/securing_networks/creating-and-managing-tls-keys-and-certificates_securing-networks#doc-wrapper[RHEL: Creating and managing TLS keys and certificates]

* link:https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/securing_networks/using-shared-system-certificates_securing-networks#the-system-wide-trust-store_using-shared-system-certificates[The system-wide truststore]

* link:https://docs.redhat.com/en/documentation/openshift_container_platform/{ocp-version}/html/cli_tools/openshift-cli-oc#managing-cli-profiles[OpenShift CLI Reference: oc login]