Profile Matrix¶
Use this page when you need to decide which certificate family and tutorial to start with.
| Spec family | AC / PKC | Base / Delta / Rebase | Manifest style | Typical signing profiles | Best starting tutorial | Notes |
|---|---|---|---|---|---|---|
| v2.1 | AC and PKC | Base, delta, rebase | Trait-oriented PlatformConfigurationV3 |
rsa-sha256, ed25519, ecdsa-p256-sha256, ml-dsa-65 |
v2.1 AC or v2.1 PKC | Default family when you want current modeling and the richest manifest semantics. |
| v1.1 | AC only | Base, delta | legacy PlatformConfigurationV2 |
rsa-sha256 |
v1.1 AC | Use when you need legacy interoperability. |
| v1.0 | AC and PKC | Base only | obsolete PlatformConfiguration |
rsa-sha256 |
v1.0 AC or v1.0 PKC | Obsolete profile family; retained for comparison. Keep manifests conservative. |
Quick chooser¶
Start with:
- v2.1 if you are building something new.
- v1.1 only when an external system still expects that family.
- v1.0 only when you are reviewing or reproducing old flows.