Upstream Certificate Authority

Configure an external CA to sign the Trust Domain Server's intermediate certificate.

tip

For an in-depth look at how upstream authorities work and guidance on choosing the right approach, see the Signing Key Management Guide.

📄️ AWS Private CA

Issue SVIDs chained to AWS Private CA.

📄️ Extension (Custom)

Integrate any CA via webhook.