---
title: Charmhub | Deploy OpenBao using Charmhub - The Open Operator Collection
description: Deploy the latest version of OpenBao on any cloud.
url: https://charmhub.io/openbao/docs/h-pki-tls
---

# OpenBao

[Goran Stojanoski](https://charmhub.io/publisher/goranstoj "View all packages from Goran Stojanoski")

* [Goran Stojanoski](https://charmhub.io/publisher/goranstoj "View all packages from Goran Stojanoski")

Platform:

26.04

24.04

edge 4

```
juju deploy openbao --channel edge
```

[Learn to deploy on juju >](https://juju.is/docs/juju/manage-applications)

---

#### Relevant links

* [Homepage](https://canonical-openbao-charms.readthedocs-hosted.com/)

---

#### Contacts

* [Submit a bug](https://github.com/canonical/openbao-omnicraft/issues)

---

Share your thoughts on this charm with the community on discourse.

[Join the discussion](https://discourse.charmhub.io/)

# PKI backed x.509 Certificates over the tls-certificates integration

Vault can be used as an intermediate Certificate Authority to provide certificates from its PKI secret engine over the [tls-certificates](https://charmhub.io/integrations/tls-certificates) integration `v1`. For more information, read [how-to use Vault as an intermediate CA](https://charmhub.io/openbao/docs/h-use-vault-as-intermediate-ca).

Charms that implement the requirer side of the integration, using the [tls-certificates charm library](https://github.com/canonical/tls-certificates-interface), can request and receive certificates. For more information about TLS in the Juju ecosystem, [read this topic](https://charmhub.io/topics/security-with-x-509-certificates).

---