diff --git a/website/content/api-docs/secret/pki.mdx b/website/content/api-docs/secret/pki.mdx index 7dbacb4bc6b5..b56243587e31 100644 --- a/website/content/api-docs/secret/pki.mdx +++ b/website/content/api-docs/secret/pki.mdx @@ -3469,7 +3469,7 @@ the CRL. revocations on, to regenerate the delta CRL. Must be shorter than CRL expiry. -- `cross_cluster_revocation` `(bool: false)` - Enable cross-cluster revocation +- `cross_cluster_revocation` `(bool: false)` - Enables cross-cluster revocation request queues. When a serial not issued on this local cluster is presented to Vault via the [`/revoke` API](#revoke-certificate), it is replicated across clusters and the cluster which issued that certificate will revoke @@ -3501,7 +3501,7 @@ the CRL. unified CRL and OCSP on the existing, previously cluster-local paths (e.g., `/pki/crl` will now contain the unified CRL when enabled). This allows transitioning AIA-based consumption of CRLs to a unified view - without having to re-issue certificates or update scripts pulling the + without having to re-issue certificates or update scripts pulling a single CRL. ~> Note: `unified_crl_on_existing_paths` is a Vault Enterprise only feature.