#navbar .max-w-8xl {
  max-width: 100%;
  border-bottom: 1px solid #ebebeb;
  background-color: #F4F3EF;
}

.max-w-8xl {
  /* background-color: #f5f5f5; */
}

#sidebar {
  left: 0;
  padding-right: 30px;
  border-right: 1px;
  border-color: #cdd64b;
  background-color: #F4F3EF;
  border-right: 1px solid #ebebeb;
}

#sidebar-content {
  padding-left: 2rem;
}

#sidebar .relative .sticky {
  opacity: 0;
}

#sidebar li > div.mt-2 {
  border-radius: 0;
  padding: 5px;
}

#sidebar li > a.text-primary {
  border-radius: 0;
  background-color: #FBFFCC;
  border-left: 4px solid #EFFF33;
  padding: 5px;
}

#sidebar li > a.mt-2 {
  border-radius: 0;
  padding: 5px;
}

#sidebar li > a.leading-6 {
  border-radius: 0;
  padding: 0px;
}

/* #sidebar ul > div.mt-12 {
  padding-top: 30px;
  position: relative;
}

#sidebar ul > div.mt-12 h5 {
  position: absolute;
  left: -12px;
  top: -0px;
} */

#header {
  border-left: 4px solid #EFFF33;
  padding-left: 16px;
  padding-right: 16px;
  background-color: #FDFFE5;
  padding-bottom: 10px;
  padding-top: 10px;
}

#content-area .mt-8 .block{
  border-radius: 0;
  border-width: 1px;
  background-color: #FCFBFA;
  border-color: #ebebeb;
}

/* #content-area:hover .mt-8 .block:hover{
  border-radius: 0;
  border-width: 1px;
  background-color: #FDFFE5;
  border-color: #EFFF33;
} */

#content-area .mt-8 .rounded-xl{
  border-radius: 0;
}

#content-area .mt-8 .rounded-lg{
  border-radius: 0;
}

#content-area .mt-6 .rounded-xl{
  border-radius: 0;
}

#content-area .mt-6 .rounded-lg{
  border-radius: 0;
}

#content-area .mt-6 .rounded-md{
  border-radius: 0;
}

#content-area .mt-8 .rounded-md{
  border-radius: 0;
}

#content-area div.my-4{
  border-radius: 0;
  border-width: 1px;
}

#content-area div.flex-1 {
  /* text-transform: uppercase; */
  opacity: 0.8;
  font-weight: 400;
}

#content-area button {
  border-radius: 0;
}

#content-area a {
  border-radius: 0;
}

#content-area .not-prose {
  border-radius: 0;
}

/* .eyebrow {
  text-transform: uppercase;
  font-weight: 400;
  color: red;
} */

#content-container {
  /* background-color: #f5f5f5; */
  margin-top: 2rem;
}

#topbar-cta-button .group .absolute {
  background-color: black;
  border-radius: 0px;
}

/* #topbar-cta-button .group .absolute:hover {
  background-color: white;
  border-radius: 0px;
} */

#topbar-cta-button .group .flex {
  margin-top: 5px;
  margin-bottom: 5px;
  font-size: medium;
}

.flex-1 .flex .items-center {
  /* background-color: #f5f5f5; */
}


Infisical

Integrations

API Reference

SDKs

Changelog

Start for Free

Log In

Get current CA cert and cert chain of a CA

Retrieve certificate / chain

An Introduction to the Infisical secret management platform.

What is Infisical?

Learn how to manage secrets in local development environments.

Local Development

Secret Management in Development Environments

Introduction

Node

Python

Next.js + Vercel

Learn how to manage secrets in Microsoft Power Apps with Infisical.

Microsoft Power Apps

Learn how to structure your projects, secrets, and other resources within Infisical.

Organization Structure

Infisical Organizational Structure Blueprint

Learn more and understand the concept of Infisical organizations.

Organizations

Learn more and understand the concept of Infisical projects.

Projects

Learn how to organize secrets with folders.

Folders

Learn how secret versioning works in Infisical.

Secret Versioning

Learn how to rollback secrets and configurations to any snapshot with Infisical.

Point-in-Time Recovery

Learn the fundamentals of secret referencing and importing in Infisical.

Referencing and Importing

Secret Referencing and Importing

Learn the fundamentals of Infisical webhooks.

Webhooks

Learn how to create a Private CA hierarchy and issue X.509 certificates.

Overview

Internal PKI

Learn how to create a Private CA hierarchy with Infisical.

Private CA

Learn how to issue X.509 certificates with Infisical.

Certificates

Learn how to automatically provision and manage TLS certificates for in Kubernetes using Infisical PKI

Certificates for Kubernetes

Kubernetes Issuer

Learn how to manage certificate enrollment of clients using EST

Enrollment over Secure Transport (EST)

Learn how to set up alerting for expiring certificates with Infisical

Alerting

Learn how to manage and use cryptographic keys with Infisical.

Key Management Service (KMS)

Learn more about integrating an HSM with Infisical KMS.

HSM Integration

Kubernetes Encryption

Kubernetes Encryption with KMS

Learn how to configure your project's encryption

Key Management Service (KMS) Configuration

Learn how to manage encryption using AWS KMS

AWS Key Management Service

Learn how to manage encryption using AWS CloudHSM

AWS CloudHSM

Learn more about identities to interact with resources in Infisical.

User and Machine Identities

Read more about the concept of user identities in Infisical.

User Identities

Learn how to use Machine Identities to programmatically interact with Infisical.

Machine Identities

Learn about Infisical's access control toolset.

Access Controls

Learn how to use RBAC to manage user permissions.

Role-based Access Controls

Learn how to use ABAC to manage permissions based on identity attributes.

Attribute-based Access Controls

Learn how to add specific privileges on top of predefined roles.

Additional Privileges

Learn how to set up timed access to sensitive resources for user and machine identities.

Temporary Access

Learn how to request access to sensitive resources in Infisical.

Access Requests

Learn how to enable a set of policies to manage changes to sensitive secrets and environments.

Approval Workflows

User Groups

Track evert event action performed within Infisical projects.

Learn how to stream Infisical Audit Logs to external logging providers.

Audit Log Streams

How to stream Infisical Audit Logs to Non-HTTP log providers

Stream to Non-HTTP providers

Learn how to set up automated secret rotation in Infisical.

Secret Rotation

Find out how to rotate Twilio SendGrid API keys.

Twilio SendGrid

Learn how to automatically rotate PostgreSQL/CockroachDB user passwords.

PostgreSQL/CockroachDB

Learn how to automatically rotate MySQL/MariaDB user passwords.

MySQL/MariaDB

Learn how to automatically rotate Microsoft SQL Server user passwords.

Microsoft SQL Server

Learn how to automatically rotate Access Key Id and Secret Key of AWS IAM Users.

AWS IAM User

Learn how to generate secrets dynamically on-demand.

Dynamic Secrets

Learn how to dynamically generate PostgreSQL database users.

PostgreSQL

Learn how to dynamically generate MySQL Database user credentials.

MySQL

Learn how to dynamically generate MS SQL database user credentials.

MS SQL

Learn how to dynamically generate Oracle Database user credentials.

Oracle

Learn how to dynamically generate Cassandra database user credentials

Cassandra

Learn how to dynamically generate Redis Database user credentials.

Redis

Learn how to dynamically generate AWS ElastiCache user credentials.

AWS ElastiCache

Learn how to dynamically generate Elasticsearch user credentials.

Elasticsearch

Learn how to dynamically generate RabbitMQ user credentials.

RabbitMQ

Learn how to dynamically generate AWS IAM Users.

AWS IAM

Learn how to dynamically generate Mongo Atlas Database user credentials.

Mongo Atlas

Learn how to dynamically generate Mongo DB Database user credentials.

Mongo DB

Learn how to dynamically generate Azure Entra Id user credentials.

Azure Entra Id

Learn how to dynamically generate user credentials via LDAP.

LDAP

Learn how to dynamically generate SAP HANA database account credentials.

SAP HANA

Learn how to dynamically generate Snowflake user credentials.

Snowflake

Learn how to dynamically generate time-based one-time passwords.

TOTP

Learn how to manage and apply project templates

Project Templates

Slack integration

Configure and manage server related features

Server Admin Console

View and manage resources across your organization

Organization Admin Console

Learn how to share time & view-count bound secrets securely with anyone on the internet.

Secret Sharing

Learn how to authenticate into Infisical with email and password.

Email and Password

Infisical service tokens allow users to programmatically interact with Infisical.

Service Token

Learn how to authenticate to Infisical from any platform or environment using an access token.

Token Auth

Learn how to authenticate to Infisical from any platform or environment.

Universal Auth

Learn how to authenticate with Infisical in Kubernetes

Kubernetes Auth

Learn how to authenticate with Infisical for services on Google Cloud Platform

GCP Auth

Learn how to authenticate with Infisical for services on Azure

Azure Auth

Learn how to authenticate with Infisical for EC2 instances, Lambda functions, and other IAM principals.

AWS Auth

Learn how to authenticate with Infisical from any platform or environment using OpenID Connect (OIDC).

General

Learn how to authenticate Github workflows with Infisical using OpenID Connect (OIDC).

Github

Learn how to authenticate CircleCI jobs with Infisical using OpenID Connect (OIDC).

CircleCI

Learn how to authenticate GitLab pipelines with Infisical using OpenID Connect (OIDC).

GitLab

Learn how to secure your Infisical account with MFA.

Multi-factor Authentication

Learn how to log in to Infisical via SSO protocols.

SSO Overview

Learn how to configure Google SSO for Infisical.

Google SSO

Learn how to configure GitHub SSO for Infisical.

GitHub SSO

Learn how to configure GitLab SSO for Infisical.

GitLab SSO

Learn how to configure Okta SAML 2.0 for Infisical SSO.

Okta SAML

Learn how to configure Microsoft Entra ID for Infisical SSO.

Entra ID / Azure AD SAML

Learn how to configure JumpCloud SAML for Infisical SSO.

JumpCloud SAML

Learn how to configure Keycloak SAML for Infisical SSO.

Keycloak SAML

Learn how to configure Google SAML for Infisical SSO.

Google SAML

Learn how to configure Keycloak OIDC for Infisical SSO.

Keycloak OIDC

Learn how to configure Auth0 OIDC for Infisical SSO.

Auth0 OIDC

Learn how to configure OIDC for Infisical SSO with any OIDC-compliant identity provider

Overview

Endpoints

Infisical PKI

Infisical KMS

Retrieve certificate / chain

Path Parameters

Response