pki: initial chapter added

2 files changed, 21 insertions, 0 deletions

diff --git a/docs/configuration/index.rst b/docs/configuration/index.rst
index 0fe481da..35b6fa5b 100644
--- a/docs/configuration/index.rst
+++ b/docs/configuration/index.rst
@@ -15,6 +15,7 @@ The following structure respresent the cli structure.
    loadbalancing/index
    nat/index
    policy/index
+   pki/index
    protocols/index
    service/index
    system/index
diff --git a/docs/configuration/pki/index.rst b/docs/configuration/pki/index.rst
new file mode 100644
index 00000000..7c0044e1
--- /dev/null
+++ b/docs/configuration/pki/index.rst
@@ -0,0 +1,20 @@
+lastproofread: 1970-01-01
+
+.. include:: /_include/need_improvement.txt
+
+###
+PKI
+###
+
+VyOS 1.4 changed the way in how encrytions keys/certificates are stored on the
+running system. In the pre VyOS 1.4 era, certificates got stored under /config
+ans every service referenced a file. That made copying a running configuration
+from system A to system B a bit harder, as you had to copy the files and their
+permissions by hand.
+
+VyOS 1.4 comes with a new approach where the keys are stored on the CLI and are
+simply referenced by their name.
+
+Don't be afraid that you need to re-do your configuration. Key transformation is
+handled, as always, by our migration scripts, so this will be a smooth transition
+for you!