Welcome to integrations¶
As organizations adopt multi-cloud and hybrid environments, managing digital identities, securing keys, and automating certificate lifecycles is critical. Venafi is at the forefront, enabling secure-by-design architectures through deep integrations with leading identity providers, cloud platforms, and certificate authorities.
With Certificate Manager - SaaS, you can integrate seamlessly across key categories:
- Authentication and identity providers: Centralize access and user identity management.
- Certificate authorities: Automate certificate issuance and lifecycle management from both public and private CAs.
- Cloud providers: Provision and manage certificates in your cloud environments.
- Machines: Connect to and manage certificate lifecycles on application endpoints like load balancers, databases, and web servers.
- Notifications: Receive real-time alerts and updates through collaboration tools or webhook-enabled systems.
Authentication and identity provider integrations¶
Integrate with your enterprise identity providers or credential managers to enable secure, automated authentication and access control within your Venafi workflows.
Certificate authority integrations¶
Venafi supports a broad range of public, private, and custom certificate authorities. These integrations simplify certificate issuance and help enforce policy across all your workloads.
Public CAs¶
Integrate with trusted third-party certificate authorities for public TLS/SSL and code signing certificates.
- Add AWS Public CA
- Add DigiCert CA
- Add Entrust CA
- Add GlobalSign CA
- Add GlobalSign MSSL CA
- Add GoDaddy CA
- Add HID PKIaaS CA
- Add Let's Encrypt (ACMEv2) CA
- Add Sectigo Certificate Manager CA
- Add SSL.com CA
Private CAs¶
Use private CAs to issue certificates for internal systems and services, ensuring security and compliance within your organization.
- Add AWS Private CA
- Add Certificate Manager - Self-Hosted CA
- Add Google Cloud Certificate Authority Service
- Add Microsoft AD CS CA
- Add OpenSSL CA
- Add Zero Touch PKI CA
Custom CAs¶
Extend Certificate Manager - SaaS with support for additional or in-house CAs using the CA Connector Framework.
- Using the CA Connector Framework
- Add ACMEv2 CA
- Add DigiCert One
- Add EJBCA
- Add Entrust CA Gateway
- Add HashiCorp Vault
- Add Sectigo
- Add SwissSign
Cloud provider integrations¶
Use native integrations with major cloud providers to securely store and provision certificates, automate certificate renewals, and support your cloud-native infrastructure.
- Configure Akamai Connection
- Configure AWS Connection
- Configure Azure Connection
- Configure Google Cloud Connection
Machine integrations¶
Machines are endpoint systems—such as load balancers, web servers, and cloud services—where certificates are provisioned and installed. These integrations allow Venafi to connect directly to application keystores, helping you manage the full certificate lifecycle across your infrastructure.
Once you create a machine, Certificate Manager - SaaS can provision certificates automatically to supported platforms.
Note
Errors will appear if you view details, create machines, or provision certificates for unsupported machine types in your Machines list. To fix this, manually delete the unsupported machines.
- Create a new machine
- Configure A10 Thunder ADC
- Configure Amazon Secrets Manager
- Configure Azure API Management
- Configure Barracuda ADC
- Configure Barracuda WAF
- Configure Cisco ASA
- Configure Cisco ISE
- Configure Citrix ADC
- Configure Cloudflare
- Configure Common KeyStore
- Configure F5 BIG IP LTM
- Configure F5 Distributed Cloud
- Configure Fortinet FortiGate
- Configure Google Cloud Classic Load Balancer
- Configure IBM DataPower Gateway
- Configure Imperva WAF
- Configure Kemp Virtual LoadMaster
- Configure Microsoft Azure Application Gateway
- Configure Microsoft Azure Application Registration
- Configure Microsoft Azure Key Vault
- Configure Microsoft IIS
- Configure Microsoft SQL Server
- Configure Microsoft Windows (PowerShell)
- Configure Palo Alto Networks Panorama
- Configure Radware Alteon ADC
- Configure Radware Cloud WAF
- Configure VMware NSX (AVI)
Notification integrations¶
Certificate Manager - SaaS supports integrations with notification platforms and collaboration tools to help you respond to system events in real time.
You can also use webhooks to push custom alerts to platforms like Slack or ServiceNow.