Create a GoDaddy certificate authority¶
Preview feature
This feature is available in Preview and is not yet generally available (GA). Behavior may change before GA.
GoDaddy provides a service that streamlines the procurement and management of SSL/TLS certificates. CyberArk has partnered with GoDaddy to give you the ability to quickly and easily request and renew certificates.
Before you begin¶
You're going to need a few things to complete this procedure.
- GoDaddy account
-
GoDaddy Customer #
Note
The Customer # field requires your GoDaddy ShopperID. GoDaddy uses both terms to refer to the same account identifier.
-
GoDaddy API Key
- GoDaddy API Secret key
- At least one active VSatellite for provisioning certificates to GoDaddy
For more information, refer to GoDaddy API Access, Usage, and Limitations
- Sign in to Certificate Manager - SaaS.
-
Click Integrations > Certificate Authorities.
-
Click New > Add Certificate Authority connector.
- Enter the Name.
- Select a VSatellite.
- In the Certificate Authority Type dropdown, select GoDaddy CA Connector.
- Click Next.
-
In Base URL, enter the GoDaddy API endpoint.
Note
The default GoDaddy base URL is
api.godaddy.com. -
Enter the API Key.
- Enter the API Secret.
-
Enter the Customer #.
Note
The Customer # field requires your GoDaddy ShopperID. GoDaddy uses both terms to refer to the same account identifier.
Note
The Customer #, API Key, and API Secret authenticate requests to GoDaddy. Together, they identify your GoDaddy account and determine which certificate products and actions are available through the API.
-
Click Test Access, then click Next.
- (Optional) In Product Options (issuance), select the certificate authority products to map to certificate issuing templates (CITs).
- (Optional) Click Add to map additional products.
- Click Next.
- (Optional) On the next Product Options page (import), select the certificate authority products to import certificates from.
- Click Add to include additional products.
- (Optional) Enable one or more Import options:
- Include revoked certificates
- Include expired certificates
- (Optional) Enable Scheduled import.
- Click Create.
What's next¶
This CA is now ready to be added to one or more certificate issuing templates. To do this, select this CA when creating certificate issuing templates.