Documentation

Guides for production

Production is the environment of record. All guides use liminalkeys.com hostnames.

Getting started

Service URLs, Console setup, enroll a Mac, and sign.

Identities, devices, policy rules, enrollment, confirmation, and audit.

LiminalKeysHost, CryptoTokenKit, confirmation prompts, and codesign.

Custody model, what never leaves cloud HSM, and audit boundaries.

See how WatchTeams ships TestFlight builds with Liminal Keys — cloud key custody, Console policy, and CryptoTokenKit on Mac.

Role	URL
API	`https://api.liminalkeys.com`
Console	`https://console.liminalkeys.com`
Marketing	`https://www.liminalkeys.com`

Private keys, PKCS#12 files, and enrollment secrets are never published on this site. Issue enrollment codes only in Console for your own tenant.