# VyOS Security

> Public Key Infrastructure (PKI) in VyOS: creating a CA, generating X.509 certificates, CRLs, and authentication for VPN and HTTPS in Yandex Cloud and VK Cloud

Source: https://opennix.org/en/docs/vyos/pki/


Managing security and cryptographic infrastructure in VyOS.

## Section Contents

### [PKI and Certificates](vyos-pki)
Managing Public Key Infrastructure and certificates.

**Features:**
- Generating CA certificates
- Creating server and client certificates
- Managing Certificate Revocation Lists (CRL)
- Integration with VPN (IPsec, OpenVPN)
- HTTPS certificates for Web API

---

## Core Components

### Certificate Authority (CA)
The certificate authority that signs certificates.

### Certificates
- Server certificates - for servers
- Client certificates - for client authentication
- Self-signed - self-signed certificates

### Private Keys
Private keys for certificates.

---

## Additional Resources

- [VyOS PKI Documentation](https://docs.vyos.io/en/latest/configuration/pki/)