> For the complete documentation index, see [llms.txt](https://docs.certinext.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.certinext.io/documentation/certificate-authorities-and-trust-stores/integrating-private-cas.md).

# Integrating Private CAs

Private CAs allow organizations to issue and manage certificates internally without relying on publicly trusted providers. This is commonly required for:

* Internal web applications
* Microservices and containerized workloads
* Device authentication
* VPN and Wi-Fi authentication
* Code signing within enterprise boundaries
* S/MIME for internal email encryption

CERTInext provides two primary approaches for integrating and managing private CAs:

1. **emCA Integration**
2. **Setting up a Private Hierarchy**

Each approach serves different operational models and governance requirements.