An update on upki

In December 2025, Canonical announced a plan todevelop a universal Public Key Infrastructure called upki. Jon Seager has publishedan update about the project with instructions on trying itout.

In the few weeks since we announced upki, the core revocation enginehas been established and is now functional, the CRLite mirroring toolis working and a production deployment in Canonical's datacentres isongoing. We're now preparing for an alpha release and remain on trackfor an opt-in preview for Ubuntu 26.04 LTS.