Frequently asked questions

What is Certificate Authority Service?

Certificate Authority Service is a highly available, scalable Google Cloud service that enables customers to simplify, automate, and customize the deployment, management, and security of private certificate authorities (CAs) while staying in control of their private keys.

What are the common use cases for Certificate Authority Service?

Given below are some common use cases for CA Service.

• Workload identities: Leverage APIs to get certificates for applications or use certificates in applications, containers, systems, and other resources.
• Enterprise scenarios: Use certificates for VPN, Chrome Enterprise Premium, signing documents, WiFi access, email, smartcard, and more.
• Centralized certificate issuance and management: Configure GKE Enterprise Service Mesh to use CA Service.
• IoT and mobile device identity: Issue TLS certificates as identity for endpoints.
• CI/CD channel, Binary Authorization, Istio, and Kubernetes.

Which compliance standards does CA Service support?

For information, see