Video coming soon…
🔐 Setup step-ca — Your Own Private Certificate Authority
Deploy step-ca on Ubuntu with Docker — a private ACME certificate authority from Smallstep, issuing trusted TLS certificates to your internal services on port 9015.
⚠️ This script is provided for demo and testing purposes only. Not intended for production use.
📦 Resources & Setup Scripts
Grab the automated bash script from GitHub to follow along with the video.
Quick Install:
wget https://raw.githubusercontent.com/mhmdali94/Docker/main/security/step-ca/step-ca-ubuntu.sh
chmod +x step-ca-ubuntu.sh
sudo bash step-ca-ubuntu.shTutorial Steps
1 Download the Script
wget https://raw.githubusercontent.com/mhmdali94/Docker/main/security/step-ca/step-ca-ubuntu.sh2 Make it Executable
chmod +x step-ca-ubuntu.sh3 Run the Installer
The script installs Docker if needed, generates a 24-character CA password, and initialises a CA named HomeLab with DNS names localhost and your server IP, remote management enabled, and everything stored in ./step.
sudo bash step-ca-ubuntu.sh4 Get Your Root Fingerprint
There is no web UI — step-ca is driven by the step CLI. You'll need the root fingerprint to bootstrap any client:
docker exec step-ca step certificate fingerprint certs/root_ca.crtPorts Used
| Port | Purpose |
|---|---|
| 9015 | CA + ACME API over HTTPS (host → container 9000) — no web UI |
| ./step | Root and intermediate private keys — your entire PKI |
| DNS names | Initialised for localhost and your server IP only |