`step` CLI

Introduction to `step`

step is an easy-to-use CLI tool for building, operating, and automating Public Key Infrastructure (PKI) systems and workflows. step acts as front-end interface to Certificate Manager and step-ca, an online X.509 and SSH Certificate Authority (CA). step is also a standalone, general-purpose PKI toolkit: You can use it for many common crypto and X.509 operations.

Using `step` with `step-ca`

If you'd like to use step with step-ca, head over to the step-ca documentation for command usage information and examples.

Examples that don't require `step-ca`

step has plenty of features that make crypto easier for the casual user.

Here's a few common uses of the step command that don't require step-ca:

Create and work with X.509 certificates
Get a TLS Certificate From Let's Encrypt
Generate JSON Web Tokens (JWTs) and JSON Web Keys (JWKs)
Obtain and Work With OAuth Tokens
Inspect an SSH certificate
Sign and encrypt arbitrary data using the NaCl library
Generate and verify TOTP tokens for multi-factor authentication (MFA)
Add and remove CA certificates from your system's default trust store

`step` CLI

Introduction to `step`

Using `step` with `step-ca`

Examples that don't require `step-ca`

Next Steps

Device Identity

step CLI

Next Steps

Device Identity

`step` CLI