# Openziti installation in production like environment **URL:** \ **Category:** Support\ **Created:** [August 17, 2022, 10:30pm UTC](https://openziti.discourse.group/t/openziti-installation-in-production-like-environment/707 "2022-08-17T22:30:20Z")\ **Posts on this page:** 1\ **Showing post:** 40
**Author:** ![TheLumberjack](https://yyz2.discourse-cdn.com/free1/user_avatar/openziti.discourse.group/thelumberjack/32/113_2.png) [@TheLumberjack](https://openziti.discourse.group/u/TheLumberjack)\ **Post date:** [August 24, 2022, 8:11pm UTC](https://openziti.discourse.group/t/openziti-installation-in-production-like-environment/707/40 "2022-08-24T20:11:21Z")
@av-dev - i posted this question. Can you see if it's inline with what you're looking to do? I think I caught the spirit of your question but if not - toss a comment on it correcting me if you don't mind? > [@Totally custom, self-maintained PKI](https://openziti.discourse.group/t/totally-custom-pki/712): > > This is a new question, born from @av-dev asking this question [in a different thread](https://openziti.discourse.group/t/openziti-installation-in-production-like-environment/707/36). Right now there doesn’t appear to be any way for me to fully bring my own PKI. I can for endpoints, but when it comes to the overlay network, it appears that OpenZiti wants to establish the PKI for itself. I’d like to be able to create the whole PKI on my own. Right now when enrolling a router, the act of enrolling that router will create a private key, pull the ca bundle from the controller, and write a clien… --- _[View the full topic](https://openziti.discourse.group/t/openziti-installation-in-production-like-environment/707)._