憑證授權單位服務是可擴充的 Google Distributed Cloud (GDC) 氣隙服務，能讓您簡化、自動化與自訂私人憑證授權單位 (CA) 的部署、管理與安全防護作業。私有憑證授權單位是透過網路驗證使用者、機器或服務身分最常見的方式之一。私人 CA 會核發數位憑證，當中包含實體身分、核發者身分和加密編譯簽章。
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eCertificate Authority Service is a scalable GDC air-gapped service for simplifying, automating, and securing private certificate authority deployment and management.\u003c/p\u003e\n"],["\u003cp\u003ePrivate certificate authorities are a common method for authenticating users, machines, or services over networks using digital certificates.\u003c/p\u003e\n"],["\u003cp\u003eCA Service enables the creation of both root CAs, which are self-signed and sit at the top of the certificate chain, and sub CAs, which are signed by another CA.\u003c/p\u003e\n"],["\u003cp\u003eThe service allows users to create root CAs, create subordinate certificate authorities and request certificates.\u003c/p\u003e\n"]]],[],null,["# Certificate Authority Service overview\n\nCertificate Authority Service is a scalable Google Distributed Cloud (GDC) air-gapped\nservice that lets you simplify, automate, and customize the deployment,\nmanagement, and security of private certificate authorities (CA). Private\ncertificate authorities are one of the most common ways to authenticate users, machines, or\nservices over networks. Private CAs issue digital certificates for entity\nidentity, issuer identity, and cryptographic signatures.\n\nWith CA Service, you can create both root CAs and sub CAs:\n\n- Root CAs: The root CA has a self-signed certificate. This certificate type sits at the top of the certificate chain.\n- Sub CAs: The signer of the CA certificate is either another CA created in the CA Service, or an external CA.\n\nWhat's next\n-----------\n\n- [Create a root CA](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/ca-service/create-root-ca)\n- [Create a managed subordinate certificate authority](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/ca-service/create-subca)\n- [Request a certificate](/distributed-cloud/hosted/docs/latest/gdch/application/ao-user/ca-service/request-cert)"]]
