Certificate Authority Service release notes

This page documents production updates to Certificate Authority Service. Check this page for announcements about new or updated features, bug fixes, known issues, and deprecated functionality.

You can see the latest product updates for all of Google Cloud on the Google Cloud page, browse and filter all release notes in the Google Cloud console, or programmatically access release notes in BigQuery.

To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly.

June 24, 2024

v1

Certificate Authority Service is now available in the following region:

• africa-south1

For more information, see Certificate Authority Service locations.

May 06, 2024

v1

Implement fine-grained policy controls over your certificate issuance using certificate templates. Certificate templates can be used in conjunction with IAM conditions to effectively create different policy controls for different users on the same CA pool. You can test certificate issuance in a validation mode and proactively identify conflicts between the CA pool's issuance policies and the certificate template's policies. For information, see Request a certificate using a certificate template. The feature is in General Availability (GA).

October 25, 2023

v1

Certificate Authority Service is now available in the following region:

• europe-west10

For more information, see Certificate Authority Service locations.

October 05, 2023

v1

Certificate Authority Service is now available in the following region:

• me-central2

For more information, see Certificate Authority Service locations.

September 15, 2023

v1

Certificate Authority Service now supports data residency.

July 24, 2023

v1

The following Assured Workloads compliance programs now support Certificate Authority Service:

• Australia Regions with Assured Support
• Canada Regions and Support
• Canada Protected B
• Israel Regions and Support
• US Regions and Support

See supported products for more information.

July 04, 2023

v1

Certificate Authority Service now supports Workforce identity federation.

June 21, 2023

v1

Certificate Authority Service is now available in the following regions:

• me-central1
• europe-west12

For more information, see Certificate Authority Service locations.

April 25, 2023

v1

General Availability: Certificate Authority Service integrates with Certificate Manager to enable certificate issuance. The integration enables users to create a Google-managed certificate issued by their Certificate Authority Service instance. For information, see Create a Google-managed certificate issued by Certificate Authority Service.

March 20, 2023

v1

General Availability: You can create resources such as certificate authorities (CA) and certificate authority pools with X.509 name constraints. Name constraints on CA resources are enforced when issuing certificates, which lets you control which names are permitted or excluded.

For more information, see CA certificate name constraints.

April 13, 2022

v1

Learn how to get started with using the Cloud Client Libraries for the Certificate Authority Service API.

January 25, 2022

v1

Certificate Authority Service provides a public issue tracker that you can use for suggesting product features, providing product and documentation feedback, and reporting issues. For more information, see File bugs or feature requests.

November 24, 2021

v1

You can now browse all the code samples for Certificate Authority Service on the documentation site. To check all the available code samples, see All CA Service code samples.

July 02, 2021

v1

Certificate Authority Service is now generally available with the following new features.

• Certificate authority (CA) pools: A CA pool is a container for multiple CAs with a common certificate issuance policy and IAM policy. More information: Overview of CA pools.
• Certificate templates: Certificate templates are reusable and parameterized schemas for common certificate issuance scenarios. The reusable configs feature has been retired, and certificate template replaces it. More information: Certificate templates.
• Identity reflection: Identity reflection is a special certificate issuance mode that limits an unprivileged certificate requester. With the identity reflection mode, the unprivileged certificate requester can only request certificates with a SAN corresponding to the identity in their credential. More information: Using identity reflection.
• Updates to CA states: A new state called STAGED has been added to the list of CA states. The new set of CA states can be found here: Certificate authority states.
• New locations: CA Service has expanded the list of locations where you can create your resources. For the complete list of locations, see Locations.

In addition to the above features, Certificate Authority Service has the following updates as part of the GA release.

• Pricing: CA Service offers a simple pay-as-you-go pricing model. Large volume customers can also avail the subscription-based pricing model. More information: Pricing.
• Service Level Agreement (SLA): SLA for CA Service is now publicly available and offers 99.9% availability per region for certificate creation. More information: SLA.
• Compliance: CA Service meets ISO 27001, 27017, 27018, SOC1, SOC2, SOC3, BSI C5, and PCI compliance standards.

October 19, 2020

v1beta1

Certificate Authority Service is available in Preview. The Preview features should not be used for production use, as all CAs and certificates created during the Preview period will be erased with the GA release.

April 04, 2020

v1beta1

Certificate Authority Service is available in private Alpha.