To learn more about the workflows described in this topic, refer to the following tutorials:
  - [Securely connect your services with Consul service mesh on VMs](/consul/tutorials/get-started-vms/virtual-machine-gs-service-mesh)
  - [Securely connect your services with Consul service mesh on Kubernetes](/consul/tutorials/get-started-kubernetes/kubernetes-gs-service-mesh)

## Runtime-specific usage documentation

For runtime-specific guidance, refer to the following pages:

- [Bootstrap Consul's certificate authority on VMs](/consul/docs/secure-mesh/certificate/bootstrap)
- [Bootstrap Consul's certificate authority on Kubernetes](/consul/docs/secure-mesh/certificate/k8s)

## Reference documentation

For reference material related to Consul's service mesh security options, refer to the following pages:

- [`/connect/ca` HTTP API endpoint reference](/consul/api-docs/connect/ca)
- [`/connect/intentions` HTTP API endpoint reference](/consul/api-docs/connect/intentions)
- [`consul connect ca` CLI command reference](/consul/commands/connect/ca)
- [`consul intention` CLI command reference](/consul/commands/intention)
- [Consul agent configuration reference](/consul/docs/reference/agent/configuration-file)
- [`service-intentions` configuration entry reference](/consul/docs/reference/config-entry/service-intentions)
