Requirements
Debian 13, SSH access, networking, DNS, and preparation checklist.
Target system
- Debian 13 on
amd64 - systemd as the init system
- root access or a user with
sudo - SSH access to the target machine
- Internet access for Debian packages and AD-PKI release artifacts
- a stable IP address
A minimum of 2 CPU cores, 4 GB of RAM, and 20 GB of free storage is recommended. Production sizing should account for certificate volume, logs, database growth, and backups.
Network and DNS
The Web UI hostname must resolve to the AD-PKI server. During setup, you can select the DNS resolver used to validate the record.
| Port | Purpose |
|---|---|
| TCP 22 | SSH administration |
| TCP 80 | HTTP-01 challenge for the Web UI certificate |
| TCP 443 | Web UI, API, and HTTPS |
| TCP 5432 | only between AD-PKI and an existing PostgreSQL server |
Port 80 must be reachable during TLS enrollment. Never expose PostgreSQL port 5432 to the public Internet.
Preparation checklist
- Debian 13 is installed and fully updated.
- SSH access and
sudowork. - The public hostname is defined.
- DNS points to the AD-PKI server.
- Ports 80 and 443 are available and reachable.
- Existing or local PostgreSQL mode has been selected.
- For existing PostgreSQL, the database and role already exist.
- Root and Intermediate CA files are ready.
- SuperAdmin details and email address are available.
Update the operating system
sudo apt update
sudo apt full-upgrade -y
sudo apt install curl -y
sudo reboot