This mod was vibe coded with care — each line has been hand reviewed and understood by the dev!

AI is a tool, not a replacement. Vibe code with care <3

What Is This Mod?

An addon for CCSecureBoot that adds Certificate Authority support to Secure Boot.

Why?

I originally built the mod for a project adding metering to Create mod via Create New Age. I wanted to sign things with a CA and use it on computers with the enrolled CA already in place.

If you want to deploy computers without worrying about tampering, regular Secure Boot is for you. But if you only need to manage a single certificate, PKI is the way to go.

What Else Does The Mod Add?

A PKI API! Using require("pki") you can access all the available functions described here.

How Do I Use It?

When setting up Secure Boot, use the install-ca command to add a CA to the local computer. Insert a floppy with the public key and it installs automatically.

To enable Secure Boot, run enroll-secure-boot and insert a disk for that computer's key.

What is PKI?

PKI (Public Key Infrastructure) is a system for managing digital certificates and public-private key pairs. It lets you verify the authenticity and integrity of software using cryptographic signatures — so you can be sure a program hasn't been tampered with.

What is a CA?

A Certificate Authority (CA) is a trusted entity that issues and signs digital certificates. When a computer trusts a CA, it automatically trusts anything that CA has signed — making it easy to manage many signed programs under one umbrella.

Why should I use a CA?

If you need to sign and deploy multiple programs or scripts across many computers, a CA simplifies everything. Just enroll the CA once on each computer, and anything signed by that CA will be trusted automatically — no need to manage individual keys per program.

When shouldn't I use a CA?

If you only have one program to sign and one computer to secure, a CA adds unnecessary complexity. Regular Secure Boot with a single key pair is simpler and more than sufficient in that case.