How much RAM does step-ca need?

Plan on 1 GB for typical use; add headroom if you expect many concurrent users.

Can I run other things on the same VPS?

Yes — size the plan so step-ca plus your other workloads fit in RAM with room to spare.

Security

An online certificate authority for your own PKI.

Issue and renew certificates for internal services, with ACME support so it fits existing tooling.

step-ca lets you run internal TLS properly — short-lived certs, automatic renewal — without a public CA.

1
Provision a VPS
Choose a plan with room for your data as well as the app.
2
Install the stack
Install Single Go binary.
3
Deploy the application
Follow the project’s official install guide for your distribution.
4
Enable HTTPS
Serve it on your own domain behind a reverse proxy with a certificate.
5
Back it up
Schedule a database dump plus a copy of any uploaded files to an off-box location.

Give step-ca its own database user with rights only on its own schema.
Reverse-proxy step-ca and terminate TLS at the proxy so certificates are managed in one place.
Take a VPS snapshot before major upgrades so you can roll back cleanly.
Keep step-ca patched — most self-hosting incidents are unpatched software.

How much RAM does step-ca need?: Plan on 1 GB for typical use; add headroom if you expect many concurrent users.
What stack does step-ca run on?: Single Go binary.
Can I run other things on the same VPS?: Yes — size the plan so step-ca plus your other workloads fit in RAM with room to spare.

Looking for something else? Popular alternatives include OpenSSL CA, Vault PKI, Cert-manager/Vault — browse all app guides.