Skip to content

Create a new Cloudflare machine

Creating a new machine is the initial step in enabling TLS Protect Cloud to connect directly to application keystores for certificate management. Once you have created machines, you can move on to provisioning certificates to those machines.

Before you begin

  • Sign up for a Cloudflare account and create a Cloudfare API token.

  • Minimum required credentials on Cloudflare: Choose between user credentials or shared credentials. You must have API token permissions in the following Zones on Cloudflare for either account.

    • User credentials: The username and password you enter.

    • Shared credentials: Optionally, you can use shared credentials from your credential provider (CyberArk is the only credential provider currently supported by TLS Protect Cloud). To use this option, first set up the connection to CyberArk.

      Zone Permissions
      Zone Settings Read & Edit
      DNS Read
      SSL and Certificates Read & Edit
      DNS Edit

  1. (Optional) From the Credential Type drop-down, select either Enter Credentials or Select Credentials. Only users with the enabled "CyberArk shared credential" capability will see this option.

    Important

    Your view of credentials may be limited due to your role. System Administrators and PKI Administrators should be able to select any credential, but users with the Resource Owner role are restricted to using the credentials associated with their teams.

    Note

    • Enter Credentials - Is used to enter your admin credentials manually.
    • Select Credentials - Is used to select your shared credentials from CyberArk.
    • If you choose Enter Credentials, proceed to the next step and enter your Cloudflare API Token.
    • If you choose Select Credentials. From the Credential drop-down, select your shared credentials.

  2. Enter your Cloudflare API Token. This token is generated and issued in Cloudflare.

    Warning

    Remember to store your username and password securely when creating a new machine. For security reasons, you will not be able to modify the fields under the "Access" tab without these credentials. This ensures that only authorized individuals can modify these fields.

  3. Click Test Access, then click Create. Note that Create is only enabled if the Test Access is successful.

What's next?