Overview

AD-PKI is a self-hosted public key infrastructure for managing internal certificate authorities and certificates. Deployment is split into two distinct phases:

1. adpki-install installs and validates the operating environment.
2. adpki-setup configures the application, database, CA hierarchy, Web UI TLS, and initial administrator.

Deployment workflow

1. Prepare Debian 13 and connect over SSH.
2. Prepare a Root and Intermediate CA.
3. Download and verify the official Debian package.
4. Install the package with APT.
5. Run sudo adpki-install.
6. Run sudo adpki-setup.
7. Distribute the Root CA certificate to clients.
8. Open the Web UI and verify the services.

Managed runtime components

The Debian package and adpki-install provide the required runtime. Do not install these components manually:

Component	Version or policy
PHP	8.4.x, minimum 8.4.16
Laravel	13.2.0
PostgreSQL	17.x, minimum 17.9
Node.js	24.15.0
Go / CA Core	1.26.1 build version for the supplied CA Core

The installer provisions Nginx, PHP, Composer, Node.js, and the PostgreSQL client. It also installs PostgreSQL Server when local database mode is selected. The CA Core is downloaded as a prebuilt, SHA-256-verified release artifact; a local Go toolchain is not required at runtime.

🔐 AD-PKI manages trust anchors and private keys. Validate the entire process in a test environment and define access control, backup, and recovery procedures before production use.