A step-by-step guide to running CockroachDB in secure mode locally. Covers creating CA and node certificates, generating client certificates for users, starting a single-node cluster with TLS, connecting as root, creating additional users with passwords, setting up a database with default privileges, and connecting as a non-root user with or without a client certificate.