Hello, I was wondering if it’s a good idea to store Ziti’s certificate (or 3rd party certs for Ziti) anywhere else that on the FS. I’m thinking of some kind of secret manager, or etcd like database. Does Ziti controller support these natively ? Regards,

It’s certainly “a good idea”! :slight_smile: It just needs to be implemented. Windows has a few different mechanisms to support it (notably “Credential Manager”). It’s just one of those things that needs to be implemented and it’s just not done yet.

There are a few options discussed in this post. [image] Options to encrypt the enrolled identity json file Ziti Overlay I am working through the process to secure the identity json file that is created after a user is enrolled. I know for ssh keys and other wallets you c…

Certificates are public information and storing them in a certificate store doesn’t provide any extra security. The bundles that software use for CAs is somewhat of an attack vector if someone could add an extra root CA to trust and then proxy a controller. However proxying the controller will cause…

OpenZiti Certificate Storage

Support General Questions

markamind June 28, 2022, 3:31am 3

There are a few options discussed in this post.

Topic		Replies	Views
CA and certificate store Ziti Overlay	4	271	August 29, 2022
Options to encrypt the enrolled identity json file Ziti Overlay	5	372	June 5, 2022
Protecting Ziti Certificate Authority certificates Ziti Overlay	2	264	October 10, 2022
Openziti beginner sdk-csharp	1	64	August 2, 2025
Things to keep in mind while managing ziti controller Ziti Overlay	8	214	July 1, 2024

OpenZiti Certificate Storage

Related topics