Sectigo - Generate SSL Private Key Download Link

Sectigo - Generate SSL Private Key Download Link generates a download link for an SSL certificate private key for:

Assets returned by the selected query or assets selected on the relevant asset page.

See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.

When accessing an enforcement action using the API, you must use the backend form of field names.

Use the Syntax Helper to find the correct name. In the enforcement action, enable Configure Dynamic Values and select Syntax Helper.

📘
Note

Not all asset types are supported for all Enforcement Actions.

See Actions supported for Activity Logs, Adapters Fetch History, and Asset Investigation modules.

See Actions supported for Aggregated Security Findings.

See Actions supported for Software.

Required Fields

These fields must be configured to run the Enforcement Action.

Action name - The name of this Enforcement Action. The system sets a default name. You can change the name.
Configure Dynamic Values (optional) - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.

Key Format Type - Select the private-key format. Supported values are key, p12, p12aes, jks, and pem.
Use stored credentials from the Sectigo adapter - Select this option to use credentials from an existing Sectigo adapter connection.
When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.

Additional Fields

These fields are optional.

Keystore Passphrase - Enter a passphrase to include when generating the keystore.

Connection Settings

💡
Connection and Credentials

When Use stored credentials from the adapter is toggled off, some of the connection fields below are required to create the connection, while other fields are optional.
Select stored Sectigo adapter credentials, or provide the Sectigo connection settings when creating a new connection.

Gateway Name - Select the Gateway through which to connect to perform the action.

APIs

Axonius uses the Sectigo API - POST ssl/v2/keystore/{ssl_id}/{format_type}.

Required Ports

The code change does not specify required ports. Confirm network requirements with your Sectigo administrator.

Required Permissions

The stored credentials, or those provided in Connection and Credentials, must have the following permission(s) to perform this Enforcement Action:

The action uses the credentials from a Sectigo adapter connection or from the connection settings supplied for the action. The code change does not specify exact Sectigo permission names; confirm the required permissions with your Sectigo administrator.

To learn more about Enforcement Actions, see Enforcement Actions.

Version Matrix

This Enforcement Action uses the Sectigo API v2 path shown below. Contact Axonius Support if it does not work as expected in your environment.

Version	Supported	Notes
Sectigo API v2	Yes	Uses `ssl/v2/keystore/{ssl_id}/{format_type}`.

For more details about other enforcement actions available, see Action Library.

Updated about 1 hour ago

Did this page help you?