skills.rest
automateyournetwork
automateyournetworkCOMMUNITY
Explore all skills by this author →
Website𝕏@john_capobiancoGitHub

vault-pki

Manage HashiCorp Vault PKI certificate issuers, roles, and certificate lifecycle operations.

650|182|Updated Feb 19, 2026
Search Tags:#hashicorp#certificates#TLS#pki#Vault#certificate authority#Secrets Management
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill vault-pki
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vault-pki
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/vault-pki
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill vault-pki

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Managing PKI certificate infrastructure in HashiCorp Vault requires memorizing API paths and CLI commands for issuers, roles, and certificate issuance, which slows down network and security operations.

Core Features & Use Cases

  • PKI Engine & Issuer Management: Enable PKI secrets engines and create or list CA certificate issuers at any Vault path.
  • Role & Certificate Lifecycle: Create issuing roles, issue certificates, list issued certificates, and revoke compromised ones.
  • Use Case: A network engineer needs a certificate for router-mgmt.example.com signed by the internal CA. Ask the agent to issue it from the appropriate PKI role and it returns the certificate without manual Vault CLI work.

Quick Start

Ask the agent to issue a certificate for router-mgmt.example.com from the network device PKI role in Vault.

Frequently Asked Questions about vault-pki

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I issue a certificate from HashiCorp Vault PKI?▼

Use the issue_certificate tool with the target PKI role and common name, such as router-mgmt.example.com. The skill calls the Vault PKI API through the vault-mcp server and returns the signed certificate.

How do I create a PKI role in Vault for network devices?▼

Use the create_pki_role tool to define a certificate issuing role under your PKI engine path, then verify it with get_pki_role. Roles control which domains and parameters certificates can be issued with.

What credentials does Vault PKI management require?▼

You need VAULT_ADDR pointing to the Vault server and VAULT_TOKEN with a PKI management policy. Vault Enterprise users can optionally set VAULT_NAMESPACE.

Can I revoke a certificate issued by Vault PKI?▼

Yes, use the revoke_certificate tool with the certificate's serial number. You can first run list_certificates to find issued certificates and identify the one to revoke.

Does this work with Vault Enterprise namespaces?▼

Yes, set the optional VAULT_NAMESPACE environment variable to target a specific Vault Enterprise namespace. Without it, operations run against the root namespace.

Related Skills

Explore More Software Engineering Skills→
BagelHoleBagelHole
46

hashicorp-vault

Manage secrets, PKI, and dynamic credentials with HashiCorp Vault.

Community
Advanced
3commas-io3commas-io
4

mtls-configuration

Configure mutual TLS for zero-trust service-to-service communication in cloud-native environments.

Official
Advanced
xalgordxalgord
954

auditing-tls-certificate-transparency-logs

Monitors Certificate Transparency logs to detect unauthorized certificate issuance and discover subdomains.

Community
Advanced
L3DigitalNetL3DigitalNet
6

certbot

Manage TLS certificate lifecycle with Certbot ACME client for Let's Encrypt.

Official
Intermediate