Skip to content

Working with custom CA connectors in the Certificate Authorities inventory

When working with the custom CA connectors, there are several things you can do. This topic discusses several features of custom CA connectors.

Before you begin

You need to have created a custom CA connector before the information in this topic will be useful.

You can find existing custom CA connectors in Certificate Manager - SaaS by going to Integrations > Certificate Authorities, and then reviewing the list to find CAs with the subtitle Connector CA.

The details panel for a custom CA connector has four tabs corresponding to the wizard's four steps that you used to create the CA connector.

  • The Administration tab lets you change the name of the connector and which VSatellite it uses for connection.
  • The Information tab controls how Certificate Manager - SaaS connects to your CA account.
  • The Issuance tab controls how certificates are created by your custom CA.
  • The Import tab controls the settings used to import certificates from the CA.

To use new product options from your CA

If new product options become available in your CA account, you can use them in Certificate Manager - SaaS without re-creating the CA connector. Each time you open a CA connector from the Certificate Authorities list, Certificate Manager - SaaS retrieves the current product list from your CA and uses it to populate Product Options on the Issuance and Import tabs.

Before you begin

Make sure the new product is available to the account that Certificate Manager - SaaS uses to connect to your CA. For example, in Sectigo Certificate Manager, a new certificate profile doesn't appear until you delegate it.

  1. Locate the CA connector in the Certificate Authorities list and click it.

    If the details panel was already open when the product was added at your CA, close the panel and open it again.

  2. Click the Issuance tab.

  3. In Product Options, select the new product, and then click Add.
  4. (Optional) To import certificates issued with the new product, click the Import tab, select the product in Product Options, and then click Add.
  5. Click Save.

Retrieving the current product list doesn't change the product options you've already selected. To let users request certificates with the new product, edit the request policies that use this CA connector.

To run a certificate import manually

  1. Locate the custom CA connector in the Certificate Authorities list.
  2. Click the Import tab.
  3. Review the existing import settings, and make changes, if needed.
  4. Click Import.

To schedule a certificate import

  1. Locate the custom CA connector in the Certificate Authorities list.
  2. Click the Import tab.
  3. Enable the Scheduled import setting and set the schedule.

  4. Enter the UTC time when you want the import to occur. For reference, the current UTC time is displayed.

    When selecting the Month option

    If you select the Month option, you will specify the day of the month to run the import. If you select a value like 31, the job will only run on months with the specified number of days and will not run on months without.

  5. Click Save.