palimarium

# Creating the root CA:
# First, enable the pki secrets engine at the pki path:

$ vault secrets enable pki

# Tune the pki secrets engine to issue certificates with a maximum time-to-live (TTL) 
#   of 87600 hours (10 years):

$ vault secrets tune -max-lease-ttl=87600h pki