> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Quickstarts

> Guides for the most common tasks in Infisical.

<div className="qs-index">
  <div className="qs-index__hero">
    <h1 className="qs-index__title">Quickstarts</h1>
    <p className="qs-index__description">Guides for the most common tasks in Infisical, grouped by product area.</p>
  </div>

  <div className="qs-index__jump" role="navigation" aria-label="Quickstart sections">
    <span className="qs-index__jump-label">Jump to</span>

    <div className="qs-index__jump-links">
      <a href="#secrets-management" className="qs-index__jump-chip qs-index__jump-chip--secrets">Secrets Management</a>
      <a href="#secrets-scanning" className="qs-index__jump-chip qs-index__jump-chip--scanning">Secrets Scanning</a>
      <a href="#certificate-management" className="qs-index__jump-chip qs-index__jump-chip--certificates">Certificates</a>
      <a href="#key-management" className="qs-index__jump-chip qs-index__jump-chip--kms">Key Management</a>
      <a href="#privileged-access-management" className="qs-index__jump-chip qs-index__jump-chip--pam">Privileged Access</a>
    </div>

    <div className="qs-index__jump-links">
      <a href="#identity-and-access" className="qs-index__jump-chip qs-index__jump-chip--identity">Identity</a>
      <a href="#networking" className="qs-index__jump-chip qs-index__jump-chip--networking">Networking</a>
      <a href="#self-hosting" className="qs-index__jump-chip qs-index__jump-chip--self-hosting">Self-hosting</a>
    </div>
  </div>

  <section className="qs-index__section qs-index__section--secrets">
    <h2 id="secrets-management"><a href="/docs/documentation/platform/secrets-mgmt/overview" className="qs-index__section-link">Secrets Management<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Store secrets in Infisical and deliver them to the applications and infrastructure that use them.</p>

    | Quickstart                                                                                              | Description                                                                    |
    | ------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------ |
    | [Add your secrets to Infisical](/docs/documentation/platform/secrets-mgmt/quick-starts/deliver-first-secret) | Store your secrets in Infisical and inject them into a running application.    |
    | [Run an app locally with secrets from Infisical](/docs/documentation/guides/local-development)               | Use the Infisical CLI to inject secrets into a locally running application.    |
    | [Inject secrets into a Docker container](/docs/integrations/platforms/docker)                                | Deliver secrets from Infisical to a Docker container at startup.               |
    | [Inject secrets into a GitHub Actions workflow](/docs/integrations/cicd/githubactions)                       | Fetch secrets from Infisical inside a GitHub Actions workflow at runtime.      |
    | [Sync secrets into Kubernetes](/docs/documentation/guides/kubernetes-operator)                               | Use the Infisical Kubernetes Operator to pull secrets into a cluster.          |
    | [Rotate a PostgreSQL credential](/docs/documentation/platform/secret-rotation/postgres-credentials)          | Automatically replace a PostgreSQL credential on a schedule.                   |
    | [Generate a short-lived PostgreSQL credential](/docs/documentation/platform/dynamic-secrets/postgresql)      | Generate a PostgreSQL credential on demand and revoke it after a short period. |
  </section>

  <section className="qs-index__section qs-index__section--scanning">
    <h2 id="secrets-scanning"><a href="/docs/documentation/platform/secret-scanning/overview" className="qs-index__section-link">Secrets Scanning<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Detect credentials that have been committed to a source code repository.</p>

    | Quickstart                                                                                          | Description                                                                 |
    | --------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------- |
    | [Scan a GitHub repository for leaked secrets](/docs/documentation/platform/secret-scanning/github)       | Connect a GitHub repository to Infisical and detect exposed credentials.    |
    | [Scan a GitLab repository for leaked secrets](/docs/documentation/platform/secret-scanning/gitlab)       | Connect a GitLab repository to Infisical and detect exposed credentials.    |
    | [Scan a Bitbucket repository for leaked secrets](/docs/documentation/platform/secret-scanning/bitbucket) | Connect a Bitbucket repository to Infisical and detect exposed credentials. |
  </section>

  <section className="qs-index__section qs-index__section--certificates">
    <h2 id="certificate-management"><a href="/docs/documentation/platform/pki/overview" className="qs-index__section-link">Certificate Management<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Issue and manage X.509 certificates through a private or public certificate authority.</p>

    | Quickstart                                                                                                          | Description                                                            |
    | ------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------- |
    | [Issue your first certificate](/docs/documentation/platform/pki/quick-starts/issue-first-certificate)                    | Set up a certificate authority and issue an X.509 certificate.         |
    | [Enroll certificates with ACME](/docs/documentation/platform/pki/applications/enrollment-methods/acme)                   | Issue certificates to servers and workloads through the ACME protocol. |
    | [Enroll a device with Microsoft Intune SCEP](/docs/documentation/platform/pki/guides/applications/microsoft-intune-scep) | Push certificates to Intune-managed devices through SCEP.              |
  </section>

  <section className="qs-index__section qs-index__section--kms">
    <h2 id="key-management"><a href="/docs/documentation/platform/kms/overview" className="qs-index__section-link">Key Management<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Store cryptographic keys in Infisical and use them to encrypt, decrypt, and sign.</p>

    | Quickstart                                                                                         | Description                                                                   |
    | -------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------- |
    | [Back Infisical KMS with an HSM](/docs/self-hosting/guides/hsm-integration)                             | Use a hardware security module to protect the root key.                       |
    | [Encrypt Kubernetes secrets with Infisical KMS](/docs/documentation/platform/kms/kubernetes-encryption) | Use Infisical KMS as the encryption provider for Kubernetes secrets.          |
    | [Sign container images with Cosign](/docs/documentation/platform/kms/sigstore-cosign)                   | Use a key from Infisical KMS to sign and verify container images with Cosign. |
    | [Serve keys through KMIP](/docs/documentation/platform/kms/kmip)                                        | Expose keys from Infisical KMS to KMIP clients.                               |
  </section>

  <section className="qs-index__section qs-index__section--pam">
    <h2 id="privileged-access-management"><a href="/docs/documentation/platform/pam/overview" className="qs-index__section-link">Privileged Access Management<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Give users time-bound, audited access to databases and servers without sharing the underlying credential.</p>

    | Quickstart                                                                                                     | Description                                                              |
    | -------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------ |
    | [Access a database or server through Infisical](/docs/documentation/platform/pam/quick-starts/launch-first-session) | Open a session to a database or server without exposing the credential.  |
    | [Open an SSH session through Infisical](/docs/documentation/platform/pam/accounts/ssh)                              | Reach a server over SSH without handing out the credential.              |
    | [Access a PostgreSQL database through Infisical](/docs/documentation/platform/pam/accounts/postgresql)              | Open a session to a PostgreSQL database without exposing the credential. |
  </section>

  <section className="qs-index__section qs-index__section--identity">
    <h2 id="identity-and-access"><a href="/docs/documentation/platform/identities/overview" className="qs-index__section-link">Identity and access<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Authenticate applications and users to Infisical.</p>

    | Quickstart                                                                                               | Description                                                                              |
    | -------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- |
    | [Authenticate a machine identity with universal auth](/docs/documentation/platform/identities/universal-auth) | Configure universal auth so an application can authenticate with a client ID and secret. |
    | [Authenticate a workload from Kubernetes](/docs/documentation/platform/identities/kubernetes-auth)            | Use a Kubernetes service account token to authenticate a workload with Infisical.        |
    | [Authenticate a workload with OIDC](/docs/documentation/platform/identities/oidc-auth/general)                | Use an OIDC identity token from a supported provider to authenticate a workload.         |
    | [Set up single sign-on](/docs/documentation/platform/sso/overview)                                            | Configure SSO through a supported identity provider.                                     |
  </section>

  <section className="qs-index__section qs-index__section--networking">
    <h2 id="networking"><a href="/docs/documentation/platform/gateways/overview" className="qs-index__section-link">Networking<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Reach systems that aren't on the public internet through a Gateway.</p>

    | Quickstart                                                                        | Description                                                           |
    | --------------------------------------------------------------------------------- | --------------------------------------------------------------------- |
    | [Reach private systems with a Gateway](/docs/documentation/platform/gateways/overview) | Set up a Gateway to reach systems that aren't on the public internet. |
    | [Deploy a Gateway](/docs/documentation/platform/gateways/gateway-deployment)           | Install and run a Gateway in your own infrastructure.                 |
  </section>

  <section className="qs-index__section qs-index__section--self-hosting">
    <h2 id="self-hosting"><a href="/docs/self-hosting/overview" className="qs-index__section-link">Self-hosting<svg className="qs-index__section-arrow" width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true"><path d="m9 18 6-6-6-6" /></svg></a></h2>

    <p className="qs-index__section-desc">Run Infisical on your own infrastructure.</p>

    | Quickstart                                                                                                     | Description                                                         |
    | -------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------- |
    | [Self-host Infisical with Docker Compose](/docs/self-hosting/deployment-options/docker-compose)                     | Run Infisical on your own infrastructure using Docker Compose.      |
    | [Self-host Infisical with the standalone Docker image](/docs/self-hosting/deployment-options/standalone-infisical)  | Run the frontend and backend from a single Docker image.            |
    | [Self-host Infisical on Kubernetes with Helm](/docs/self-hosting/deployment-options/kubernetes-helm)                | Deploy Infisical to a Kubernetes cluster with the Helm chart.       |
    | [Self-host Infisical on AWS with ECS Fargate](/docs/self-hosting/deployment-options/aws-native)                     | Deploy Infisical on AWS using ECS Fargate, RDS, and ElastiCache.    |
    | [Self-host Infisical on GCP with GKE](/docs/self-hosting/deployment-options/gcp-native)                             | Deploy Infisical on GCP using GKE, Cloud SQL, and Memorystore.      |
    | [Install Infisical from the Linux package](/docs/self-hosting/deployment-options/native/linux-package/installation) | Install Infisical directly on a Linux host with the native package. |
  </section>
</div>