Block new Linked CA creation in step ca init by tashian · Pull Request #1559 · smallstep/cli

@tashian @claude

Remove support for creating new Linked CA deployments:
- Remove "linked" from --deployment-type flag options
- Return clear error when --deployment-type=linked is used
- Remove "Linked" from interactive deployment type selection
- Update help text to point users to Step CA Pro

Existing Linked CAs can still run (via certificates repo) but
new ones cannot be created in open-source step-ca.

This is phase 1 of removing Linked CA from open-source step-ca.
A future release will remove the functionality entirely.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

@github-actions bot added the needs triage

Waiting for discussion / prioritization by team

label

Jan 29, 2026

tashian added a commit to smallstep/docs that referenced this pull request

Jan 29, 2026
Update documentation to clarify that linked CA functionality is now
available exclusively through Step CA Pro, not open-source step-ca.

Related PRs:
- smallstep/certificates#2554
- smallstep/cli#1559

PRO-331

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Add complete migration workflow using the new step-ca import command
to the Linked CA deprecation section.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Cover the linked deployment type deprecation error and other
deployment type validation paths.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>