- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
Certificate Authorities
CertSecure Manager issues, collects and revokes certificates through connectors to public and private Certificate Authorities (CAs). Each connector is added as a CA under Administration > Certificate Authorities, and its certificates are then requested from Enrollment like those of any other CA.
Some public CAs need preparation in the CA's own portal before the connector can be added, such as creating an API key or choosing the right product model. The guides in this section cover that preparation and the CA-specific settings and behaviour of each connector.
This section covers:
- ACME CAs – Let's Encrypt, Google Public CA and any other ACME directory: directories, External Account Binding and dns-01 validation.
- AWS – AWS Certificate Manager (AWS-ACM) and AWS Private CA (AWS-PCA): AWS credentials, domain validation for ACM, and adding a connection from the AWS tile.
- DigiCert Connector – generating a DigiCert CertCentral API key, the account details CertSecure Manager needs, and installing the DigiCert connector.
- EJBCA – configuring the EJBCA REST API connection with a client certificate.
- GlobalSign – creating the GlobalSign Atlas API credential and mTLS certificate, and GlobalSign templates.
- GoDaddy – the GoDaddy SSL (Credits) and GoDaddy Automated SSL connectors: adding a GoDaddy CA, the default certificate template, domain validation, pending orders, inventory synchronization and credential status.
- HashiCorp Vault PKI – the Vault PKI mount, the policy and AppRole for CertSecure Manager, and synchronizing and issuing certificates.
- Microsoft AD CS – installing the MSCA connector on a domain-joined machine and adding the AD CS CA.
- Sectigo – the Sectigo Certificate Manager connection, configs, domains and domain control validation.
- Sectigo-PS – the Sectigo Partner Services connection, configs, OV/EV pre-validation and DCV records.
For how ACME CAs relate to the ACME domains, profiles and automation, see the ACME page.