AuthBox PIV

This is an AuthBox instance. Every request to its API is authenticated with a client certificate presented during the TLS handshake — there is no password, no API key, and no session cookie.

If your browser or client showed a connection error rather than a page, that is what a missing client certificate looks like. It is not a fault; the server declined to continue without one.

Getting a certificate

You generate a key on your own machine and send a certificate signing request. The key never leaves your machine and this server never sees it. Instructions and a submission form.

This deployment requires an invitation. If you do not have one, ask an administrator.

Health

/livez — whether the process is running. /readyz — whether it should receive traffic. Both answer without a certificate.

API

Operations this service exposes, and the specification at /openapi.yaml. The published document describes what the API accepts and returns; it does not describe who is permitted to call it.