Welcome to integrations¶
As organizations adopt multi-cloud and hybrid environments, managing digital identities, securing keys, and automating certificate lifecycles is critical. Venafi is at the forefront, enabling secure-by-design architectures through deep integrations with leading identity providers, cloud platforms, and certificate authorities.
With Certificate Manager - SaaS, you can integrate seamlessly across key categories:
- Authentication and identity providers: Centralize access and user identity management.
- Certificate authorities: Automate certificate issuance and lifecycle management from both public and private CAs.
- Cloud providers: Provision and manage certificates in your cloud environments.
- Machines: Connect to and manage certificate lifecycles on application endpoints like load balancers, databases, and web servers.
- Notifications: Receive real-time alerts and updates through collaboration tools or webhook-enabled systems.
Authentication and identity provider integrations¶
Integrate with your enterprise identity providers or credential managers to enable secure, automated authentication and access control within your Venafi workflows.
- Configure BeyondTrust Connection
- Configure CyberArk Connection
- Configure Google Secret Manager as a Credential Manager
Certificate authority integrations¶
Venafi supports a broad range of public, private, and custom certificate authorities. These integrations simplify certificate issuance and help enforce policy across all your workloads.
Public CAs¶
Integrate with trusted third-party certificate authorities for public TLS/SSL and code signing certificates.
- Add AWS Public CA
- Add DigiCert CA
- Add Entrust CA
- Add GlobalSign CA
- Add GlobalSign MSSL CA
- Add GoDaddy CA
- Add HID PKIaaS CA
- Add Let's Encrypt (ACMEv2) CA
- Add Sectigo Certificate Manager CA
- Add SSL.com CA
Private CAs¶
Use private CAs to issue certificates for internal systems and services, ensuring security and compliance within your organization.
- Add AWS Private CA
- Add Certificate Manager - Self-Hosted CA
- Add Google Cloud Certificate Authority Service
- Add Microsoft AD CS CA
- Add OpenSSL CA
- Add Zero Touch PKI CA
Custom CAs¶
Extend Certificate Manager - SaaS with support for additional or in-house CAs using the CA Connector Framework.
- Using the CA Connector Framework
- Add ACMEv2 CA
- Add DigiCert One
- Add EJBCA
- Add Entrust CA Gateway
- Add HashiCorp Vault
- Add Sectigo
- Add SwissSign
Cloud provider integrations¶
Use native integrations with major cloud providers to securely store and provision certificates, automate certificate renewals, and support your cloud-native infrastructure.
- Configure Akamai Connection
- Configure AWS Connection
- Configure Azure Connection
- Configure Google Cloud Connection
Machine integrations¶
Machines are endpoint systems—such as load balancers, web servers, and cloud services—where certificates are provisioned and installed. These integrations allow Venafi to connect directly to application keystores, helping you manage the full certificate lifecycle across your infrastructure.
Once you create a machine, Certificate Manager - SaaS can provision certificates automatically to supported platforms.
Note
Errors will appear if you view details, create machines, or provision certificates for unsupported machine types in your Machines list. To fix this, manually delete the unsupported machines.
To learn how machines work, see About machines. These are the supported machine types:
| Machine type | Runs on | Discovery | Provisioning |
|---|---|---|---|
| A10 Thunder ADC | VSatellite | Yes | Yes |
| Amazon Secrets Manager | Cloud | Yes | Yes |
| Aruba ClearPass (Preview) | VSatellite | Yes | Yes |
| Azure API Management | Cloud | Yes | Yes |
| Barracuda ADC | VSatellite | Yes | Yes |
| Barracuda WAF | VSatellite | Yes | Yes |
| Cisco ASA (Preview) | VSatellite | Yes | Yes |
| Cisco ISE (Preview) | VSatellite | Yes | Yes |
| Citrix ADC | VSatellite | Yes | Yes |
| Cloudflare | Cloud or VSatellite | Yes | Yes |
| Common KeyStore | VSatellite | Yes | Yes |
| F5 BIG-IP LTM | VSatellite | Yes | Yes |
| F5 Distributed Cloud | Cloud | Yes | Yes |
| Fortinet FortiADC | VSatellite | Yes | Yes |
| Fortinet FortiGate (Preview) | VSatellite | Yes | Yes |
| Fortinet FortiWeb (Preview) | VSatellite | Yes | Yes |
| Google Cloud Classic Load Balancer | VSatellite | Yes | Yes |
| Google Secret Manager | Cloud | Yes | Yes |
| IBM API Connect | VSatellite | Yes | Yes |
| IBM DataPower Gateway | VSatellite | Yes | Yes |
| Imperva WAF | Cloud or VSatellite | Yes | Yes |
| Kemp Virtual LoadMaster | VSatellite | Yes | Yes |
| Microsoft Azure Application Gateway | Cloud | Yes | Yes |
| Microsoft Azure Application Registration | Cloud or VSatellite | Yes | No |
| Microsoft Azure Private Key Vault | VSatellite | Yes | Yes |
| Microsoft IIS | VSatellite | Yes | Yes |
| Microsoft SQL Server | VSatellite | No | Yes |
| Microsoft Windows (PowerShell) | VSatellite | No | Yes |
| MuleSoft Dedicated Load Balancer (Preview) | Cloud | Yes | Yes |
| Oracle Cloud API Gateway | Cloud | Yes | Yes |
| Oracle Cloud Load Balancer (Preview) | Cloud | Yes | Yes |
| Palo Alto Networks Panorama | VSatellite | Yes | Yes |
| Palo Alto Networks Prisma Access | VSatellite | Yes | Yes |
| Radware Alteon ADC | VSatellite | Yes | Yes |
| Radware Cloud WAF | Cloud | Yes | Yes |
| VMware NSX Advanced Load Balancer (AVI) | VSatellite | Yes | Yes |
Machine types marked (Preview) are available in Preview and aren't yet generally available (GA). Their functionality and behavior can change before GA.
Notification integrations¶
Certificate Manager - SaaS supports integrations with notification platforms and collaboration tools to help you respond to system events in real time.
You can also use webhooks to push custom alerts to platforms like Slack or ServiceNow.