Axonius Documentation

    Sectigo - Enroll SSL Certificate with Key Generation

    Sectigo - Enroll SSL Certificate with Key Generation enrolls an SSL certificate with key generation for the Sectigo organization associated with each selected certificate asset.

    • Assets returned by the selected query or assets selected on the relevant asset page.

    See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

    When accessing an enforcement action using the API, you must use the backend form of field names.

    Use the Syntax Helper to find the correct name. In the enforcement action, enable Configure Dynamic Values and select Syntax Helper.

    📘

    Note

    Required Fields

    These fields must be configured to run the Enforcement Action.

    • Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
    • Configure Dynamic Values (optional) - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
    • Use stored credentials from the Sectigo adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

    • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.

    • Common Name - Enter the common name for the certificate.
    📘

    Note

    The action uses the Organization ID associated with the selected certificate asset. The action fails for assets that do not have an Organization ID.

    Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Working with Axonius Compute Nodes.

    Additional Fields

    These fields are optional.

    • Key Algorithm - Specify the key algorithm.
    • Key Size (RSA) or Curve Name (EC) - Specify the RSA key size or EC curve name.
    • PKCS#12 Passphrase - Specify the PKCS#12 passphrase.
    • Certificate Profile ID - Enter the numeric certificate profile ID.
    • Term (Days) - Enter a term of at least 1 day.
    • Subject Alternative Names - Add the subject alternative names for the certificate.
    • Comments - Add comments to the enrollment request.

    Connection Settings

    💡

    Connection and Credentials

    When Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.

    APIs

    Axonius uses the Sectigo API - POST /ssl/v2/enroll-keygen.

    Required Ports

    Use the network requirements for the configured Sectigo adapter connection.

    Required Permissions

    The stored credentials, or those provided in Connection and Credentials, must have the following permission(s) to perform this Enforcement Action:

    Confirm the permissions required to enroll SSL certificates with key generation with your Sectigo administrator.

    To learn more about Enforcement Actions, see Enforcement Actions.

    Updated 7 days ago

    Did this page help you?