--- title: istio.v1.auth layout: protoc-gen-docs generator: protoc-gen-docs number_of_entries: 3 ---
Service for managing certificates issued by the CA.
rpc CreateCertificate(IstioCertificateRequest) returns (IstioCertificateResponse)
Using provided CSR, returns a signed certificate.
Certificate request message. The authentication should be based on: 1. Bearer tokens carried in the side channel; 2. Client-side certificate via Mutual TLS handshake. Note: the service implementation is REQUIRED to verify the authenticated caller is authorize to all SANs in the CSR. The server side may overwrite any requested certificate field based on its policies.
Certificate response message.