Combining DevOps with PKI Compliance Using HashiCorp Vault & Consul
summary
Shows a working EJBCA Vault plugin installed into Vault, using mTLS client auth to issue and revoke certificates and log every issuance to the PKI audit trail. Demonstrates Vault as a single secrets front end chained to Consul service mesh for automated mTLS in microservices. Describes migrating >25 fragmented CAs into one HSM-backed PKI that scales to millions of certs and a FIPS 140-2 level 3 racked Secure Execution Environment for stricter compliance.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:05Vision
- 1:37Who is Thomas
- 2:52What is automation
- 3:25Large customer story
- 7:02PKI trends
- 9:03PKI example
- 10:31Consolidating PKI
- 13:08Demo Agenda
- 14:22Vault
- 15:27Demo
- 16:55Configuration
- 23:00Secure Execution Environment
- 24:07Summary
related talks
45mSecure Together: Consul + Vault
51mRun modern PKI workflows with HCP Vault on AWS
58mConsul + Vault Learn Lab: Consul API Gateway
29mKeys, Certs and Vault: From DevSecOps to Post-Quantum
29mAdopting HashiCorp Vault: Deployment, Adoption, and Beyond
28mSecret Management with Hashicorp´s Vault
27mBringing in Compliance for Public
13mAutomating PKI: Paddy Power Betfair's Journey with Vault