---
type: task
---

# Nebula Cert Groups

Allow specifying one or more group names when creating a host (or signing a
host's existing public key). These groups will get added to the host's cert,
and can be used in firewall rules.