skills.rest
harley-systems
harley-systemsOFFICIAL
Explore all skills by this author →
GitHub

sca-cskill

Manage PKI certificates, CSRs, and YubiKey signing with the SCA CLI.

1|Updated Jan 31, 2026
Search Tags:#CSR#sca#certificate#PKI#YubiKey#OpenSSL
One-click install
npx skills add https://github.com/harley-systems/claude-skills --skill sca-cskill
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sca-cskill
Source: https://github.com/harley-systems/claude-skills/tree/main/sca-cskill
Command: npx skills add https://github.com/harley-systems/claude-skills --skill sca-cskill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill helps practitioners and developers manage PKI operations with the SCA CLI, turning complex certificate workflows into guided steps that are easy to follow.

Core Features & Use Cases

  • Generate private keys and CSRs for Certificates Authorities and end-entities.
  • Sign CSRs, issue certificates, and export bundles (including PKCS#12 and SSH keys) across Root CA/SubCA hierarchies.
  • Integrate with YubiKey hardware for secure signing and key management, including air-gapped or offline workflows.

Quick Start

Set up a service name with sca config, generate a key for that service, create a CSR, and then approve to issue a certificate:

  • sca config set service vpn
  • sca create key service
  • sca create csr service
  • sca approve service

Frequently Asked Questions about sca-cskill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a CSR and issue a certificate using the SCA CLI?▼

To generate a CSR and issue a certificate, configure a service name, create a key, generate the CSR, and run the approve command to issue the certificate directly via the SCA CLI.

Can I use a YubiKey for offline PKI signing in an air-gapped environment?▼

Yes, YubiKey hardware supports secure offline signing and key management workflows, enabling you to maintain Root and SubCA hierarchies in air-gapped environments via the SCA CLI.

Does the SCA CLI support exporting PKCS#12 bundles and SSH keys?▼

Yes, the SCA CLI supports exporting certificate bundles across Root CA and SubCA hierarchies, including PKCS#12 bundles and SSH keys for end-entities after CSR approval.

What is the best way to manage Root CA and SubCA hierarchies with OpenSSL?▼

Managing Root CA and SubCA hierarchies involves creating private keys, signing CSRs, and issuing certificates across the chain, guided step-by-step by the SCA CLI to simplify complex PKI operations.

Do I need the SCA tool installed to manage PKI certificates and CSRs?▼

Yes, the SCA tool must be installed and configured to manage PKI certificates and CSRs, requiring proper CA and SubCA setups alongside optional YubiKey hardware for signing workflows.

Related Skills

Explore More Software Engineering Skills→
moonshineTPmoonshineTP

OpenSSL

Generate and sign SSL/TLS certificates and manage cryptographic keys with OpenSSL.

Community
Advanced
ValyntValynt

zero-trust-service-mesh

Enforce mutual TLS and zero-trust policies across ValueOS agents in Kubernetes with Istio.

Official
Advanced
KaiserWhoLearnsKaiserWhoLearns

OpenSSL

Generate private keys, CSRs, and self-signed certificates with OpenSSL.

Community
Advanced
BjzyLabsBjzyLabs
1

step

Issue, renew, and revoke TLS certificates via Smallstep Step CA.

Official
Advanced