Protect internal services and systems using certificates from your own PKI. We configure step-ca with an agreed trust chain and certificate issuance policies.
Choose a plan and order in the NUXOA Manager. We agree provisioning and required access with you.
250.00 € net one-time setup
Managed services included in every package
250.00 € net one-time setup
Monitoring and updates
DDoS protection
7 daily on-site backups
2 weekly off-site backups
24/7 support through our ticket system
We retain seven daily backups on-site and two additional weekly backups at a separate location.
All managed packages have a 12-month contract term and a 3-month cancellation notice period. Save with advance payment: 3 months: 1% · 6 months: 3% · 12 months: 5% off the package price. The contract term applies independently of the payment interval.
Standard package
step-ca S
Compact environment to get started 250.00 € net one-time setup
All prices per month excluding VAT. Specifications cover the entire instance, including the operating system, application and required services. Usable capacity and performance depend on data volume and concurrent usage.
Optional upgrades
Add processing power, RAM or NVMe storage to your package. We will discuss the upgrade with you to match your server's requirements.
Additional resource
Price / month
1 virtual CPU (vCPU)
€8.00
1 GB RAM
€6.00
100 GB NVMe storage
€10.00
500 GB NVMe storage
€35.00
1,000 GB NVMe storage
€60.00
All upgrade prices are monthly, in addition to the package price, and exclude VAT.
AMD EPYC processors and ECC memory power our hosts. Your package defines the vCPU and RAM resources for your application.
NVMe storage
Samsung NVMe SSDs provide storage for your virtual servers, holding the operating system, your applications and their data.
Three data copies
Ceph stores three copies of your data on separate hosts. This replication complements the backups used to restore earlier versions of your data.
Redundant connectivity
The hosts have redundant connectivity of at least 2 × 25 Gbit/s. Bandwidth is shared. Each host connects to the Ceph storage network at a minimum of 2 × 100 Gbit/s.
Traffic & billing
20 TB traffic per month included. Additional traffic: €1.50 per TB, excluding VAT. Alternatively, we can arrange a Gbit/s flat rate or 95th-percentile billing.
The service includes a private CA instance, basic PKI configuration and handover. Setup costs €250 net once. The root key remains offline or with the customer; the intermediate CA performs online issuance. HSM/KMS and high availability are planned separately.
Your own trust chain
An offline root and issuing intermediate CA follow an agreed key management plan.
Automate certificates
Configure ACME and other provisioners for your internal services.
Control issuance
Permissions, names and certificate lifetimes are agreed before launch.
The service uses the open-source step-ca project to issue private certificates. Publicly trusted TLS certificates are available through our separate certificate offering.
Migration and setup
Existing trust chains, keys and certificate lifetimes are reviewed first. Key handover and recovery require an agreed secure process. Updates do not reinitialise an existing CA.
Do browsers automatically trust these certificates?
No. Your private PKI's public root trust anchor must be distributed to the intended devices. Planning and integration with endpoint management are agreed separately.
What does the managed plan include?
Your own instance, standard installation, technical updates, monitoring and the listed backups. Resources cover the operating system, application and required services together. Migration, custom integrations and high availability are agreed separately.
Need a different configuration?
We plan a suitable configuration and your migration with you. Migration and custom workflows are quoted separately.
