diff --git a/website/content/docs/connect/ca/aws.mdx b/website/content/docs/connect/ca/aws.mdx index 1c608c2c62..1c3499c353 100644 --- a/website/content/docs/connect/ca/aws.mdx +++ b/website/content/docs/connect/ca/aws.mdx @@ -1,12 +1,11 @@ --- layout: docs -page_title: Connect - Certificate Management +page_title: Service Mesh Certificate Authority: AWS Certificate Manager description: >- - Consul can be used with AWS Certificate Manager Private CA to manage and sign - certificates. +You can use the AWS Certificate Manager Private Certificate Authority instead of Consul's built-in CA to secure your service mesh. Learn how to configure the AWS ACM Private CA, its limitations in Consul, and cost planning considerations. --- -# AWS Certificate Manager Private CA as a Connect CA +# AWS Certificate Manager as a Service Mesh Certificate Authority Consul can be used with [AWS Certificate Manager (ACM) Private Certificate Authority diff --git a/website/content/docs/connect/ca/consul.mdx b/website/content/docs/connect/ca/consul.mdx index 3f65a85e24..8cd00b319a 100644 --- a/website/content/docs/connect/ca/consul.mdx +++ b/website/content/docs/connect/ca/consul.mdx @@ -1,14 +1,11 @@ --- layout: docs -page_title: Connect - Certificate Management +page_title: Service Mesh Certificate Authority: Built-in CA description: >- - Consul ships with a built-in CA system so that Connect can be easily enabled - out of the box. The built-in CA generates and stores the root certificate and - private key on Consul servers. It can also be configured with a custom - certificate and private key if needed. +Consul has a built-in certificate authority for your service mesh that you can configure to work with custom certificates and private keys. Learn how to configure the built-in CA and use it alongside your preferred PKI. --- -# Built-In CA +# Built-In Certificate Authority for Service Mesh Consul ships with a built-in CA system so that Connect can be easily enabled out of the box. The built-in CA generates and stores the diff --git a/website/content/docs/connect/ca/index.mdx b/website/content/docs/connect/ca/index.mdx index 45b9b31498..ff058792df 100644 --- a/website/content/docs/connect/ca/index.mdx +++ b/website/content/docs/connect/ca/index.mdx @@ -1,10 +1,11 @@ --- layout: docs -page_title: Connect - Certificate Management -description: An overview of the Connect Certificate Authority mechanisms. +page_title: Service Mesh Certificate Authority: Overview +description: >- +Consul uses a certificate authority (CA) to generate, use, manage, sign, and store certificates for your service mesh. Learn about certificate management, including configuration, root cert rotation, cross-signing, and regenerating the CA. --- -# Connect Certificate Management +# Service Mesh Certificate Authority Overview Certificate management in Connect is done centrally through the Consul servers using the configured CA (Certificate Authority) provider. A CA provider diff --git a/website/content/docs/connect/ca/vault.mdx b/website/content/docs/connect/ca/vault.mdx index b5f410fa3e..3f99450e33 100644 --- a/website/content/docs/connect/ca/vault.mdx +++ b/website/content/docs/connect/ca/vault.mdx @@ -1,12 +1,11 @@ --- layout: docs -page_title: Connect - Certificate Management +page_title: Service Mesh Certificate Authority: Vault description: >- - Consul can be used with Vault to manage and sign certificates. The Vault CA - provider uses the Vault PKI secrets engine to generate and sign certificates. +You can use the Vault certificate authority instead of Consul’s built-in CA to secure your service mesh. Learn how to configure the Vault CA and manage PKI paths with either Vault or Consul. --- -# Vault as a Connect CA +# Vault as a Service Mesh Certificate Authority Consul can be used with [Vault](https://www.vaultproject.io) to manage and sign certificates.