Skip to content

Create a new machine

Creating a machine allows Certificate Manager - SaaS to connect directly to keystores where applications keep their certificates. Certificate Manager - SaaS can then install certificates into application keystores. When the certificates are used by an application, a machine identity is created.

From Certificate Manager - SaaS, you can manage the entire machine identity lifecycle—from key generation to certificate issuance to TLS server endpoints.

Important

To create a machine, you need the minimum required permissions of the Resource Owner role. Your PKI administrator must enable these permissions.

To create a new machine

  1. Sign in to Certificate Manager - SaaS.
  2. Click Installations > Machines.
  3. Click New and then select the Machine type you want to create.
  4. Enter a Name for the new machine. This name will help Certificate Manager - SaaS users to identify this machine.
  5. Select an Owning Team. If you need to create a new team see, create a new team.

  6. (If applicable) Select a VSatellite. If you don't currently have a VSatellite, deploy a VSatellite first, and then return to this page.

    Note

    Azure API Management, Cloudflare, Imperva WAF, Microsoft Azure Application Registration, and Radware Cloud WAF machines run natively in Certificate Manager - SaaS and do not require a VSatellite.

    • To enable high availability for machine operations, select a primary VSatellite that is part of an HA group. The system will automatically use any healthy VSatellite in that group to start machine-related operations. Learn more

  7. Continue instructions for your specific machine by selecting it in the following list:

  8. A10 Thunder ADC

  9. Amazon Secrets Manager
  10. Aruba ClearPass
  11. Azure API Management
  12. Barracuda ADC
  13. Barracuda WAF
  14. Cisco ASA
  15. Cisco ISE
  16. Citrix ADC
  17. Cloudflare
  18. Common KeyStore
  19. F5 BIG IP LTM
  20. F5 Distributed Cloud
  21. Fortinet FortiGate
  22. Fortinet FortiWeb
  23. Google Cloud Classic Load Balancer
  24. IBM DataPower Gateway
  25. Imperva WAF
  26. Kemp Virtual LoadMaster
  27. Microsoft Azure Application Gateway
  28. Microsoft Azure Application Registration
  29. Microsoft Azure Key Vault
  30. Microsoft IIS
  31. Microsoft SQL Server
  32. Microsoft Windows (PowerShell)
  33. Palo Alto Networks Panorama
  34. Radware Alteon ADC
  35. Radware Cloud WAF
  36. VMware NSX (AVI)

Set up a new machine discovery schedule

  1. From the CAPI Store drop down, select the certificate store you want the certificate installed in.
  2. Click the Exclude Expired toggle switch toggle to exclude discovery of expired certificates associated with this new machine.
  3. Click the Exclude Inactive toggle switch toggle to exclude discovery of inactive certificates associated with this new machine.
  4. Click the Schedule toggle switch toggle to enable machine discovery scheduling with this new machine.
  5. Under Repeat every, select your desired daily, weekly, or monthly schedule. Then, choose your desired time. !!! note The Schedule toggle switch toggle must be enabled to configure machine discovery scheduling timeframes.
  6. Click Continue.

Note

Current local time is in UTC.

Set up a new machine provisioning schedule

  1. Click the Schedule toggle switch toggle to enable machine provisioning scheduling with this new machine.
  2. Under Repeat every, select your desired daily, weekly, or monthly schedule. Then, choose your desired time. !!! note The Schedule toggle switch toggle must be enabled to configure machine provisioning scheduling timeframes.
  3. Click Finish.

Note

Current local time is in UTC.