step

Issue, renew, and revoke TLS certificates via Smallstep Step CA.

1|Updated Feb 1, 2026
One-click install
npx skills add https://github.com/BjzyLabs/vCenterCert --skill step
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: step
Source: https://github.com/BjzyLabs/vCenterCert/tree/main/.ruler/skills/step
Command: npx skills add https://github.com/BjzyLabs/vCenterCert --skill step

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides automated interaction with Smallstep Step CA to issue, renew, revoke, and manage certificates and PKI workflows.

Core Features & Use Cases

  • Certificate issuance for services with SANs and ACME integration
  • Certificate renewal, revocation, and certificate lifecycle management
  • PKI administration, root/intermediate CA handling, and TLS provisioning for Kubernetes and services

Quick Start

Ensure Step CA CLI is installed and the CA is reachable. Example commands: step ca health step ca certificate myservice.example.com myservice.crt myservice.key --san myservice.example.com --ca-url https://ca.bjzy.me step certificate inspect myservice.crt --expires-in

Frequently Asked Questions about step

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate TLS certificate renewal for internal services using Step CA?

Automate TLS certificate renewal using Step CA by leveraging ACME endpoints within your infrastructure. This allows internal services, Kubernetes workloads, and edge hosts to automatically renew expiring certificates without manual intervention.

Can I issue Step CA certificates with multiple SANs for Kubernetes workloads?

Yes, you can issue Step CA certificates with Subject Alternative Names (SANs) for Kubernetes workloads. Use the step CLI to specify additional SANs during the certificate issuance process to properly identify your internal services.

What is the best way to revoke a compromised TLS certificate in a Step CA environment?

The best way to revoke a compromised TLS certificate in a Step CA environment is by using the step CLI. This skill automates the revocation process, immediately invalidating the compromised certificate across your infrastructure.

Does Step CA integrate with HashiCorp Vault for PKI administration?

Yes, Step CA supports optional Vault integration for PKI administration. This allows you to manage root and intermediate CA handling while securely storing and managing cryptographic keys and certificates.

How to provision TLS certificates for CI/CD pipelines using ACME endpoints?

Provision TLS certificates for CI/CD pipelines using ACME endpoints by configuring your Step CA server. This skill enables automated interaction with the CA, allowing pipelines to request and retrieve valid certificates dynamically.

What CLI tools do I need to manage Step CA PKI lifecycles?

You need the step CLI installed on a management workstation and network access to a reachable Step CA server. These prerequisites allow you to perform health checks, issue, renew, and revoke TLS certificates.