Create a new machine¶

Creating a machine allows Certificate Manager - SaaS to connect directly to keystores where applications keep their certificates. Certificate Manager - SaaS can then install certificates into application keystores. When the certificates are used by an application, a machine identity is created.

From Certificate Manager - SaaS, you can manage the entire machine identity lifecycle—from key generation to certificate issuance to TLS server endpoints.

To create a new machine¶

1. Sign in to Certificate Manager - SaaS.
2. Click Installations > Machines.
3. Click New and then select the Machine type you want to create.
4. Enter a Name for the new machine. This name will help Certificate Manager - SaaS users to identify this machine.
5. Select an Owning Team. If you need to create a new team see, create a new team.

6. (If applicable) Select a VSatellite. If you don't currently have a VSatellite, deploy a VSatellite first, and then return to this page.

   Note

   Azure API Management, Cloudflare, Imperva WAF, and Microsoft Azure Application Registration machines run natively in Certificate Manager - SaaS and do not require a VSatellite.

   • To enable high availability for machine operations, select a primary VSatellite that is part of an HA group. The system will automatically use any healthy VSatellite in that group to start machine-related operations. Learn more

7. Continue instructions for your specific machine by selecting it in the following list:

8. A10 Thunder ADC

9. Amazon Secrets Manager
10. Azure API Management
11. Barracuda ADC
12. Barracuda WAF
13. Cisco ASA
14. Cisco ISE
15. Citrix ADC
16. Cloudflare
17. Common KeyStore
18. F5 BIG IP LTM
19. F5 Distributed Cloud
20. Fortinet FortiGate
21. Google Cloud Classic Load Balancer
22. IBM DataPower Gateway
23. Imperva WAF
24. Kemp Virtual LoadMaster
25. Microsoft Azure Application Gateway
26. Microsoft Azure Application Registration
27. Microsoft Azure Key Vault
28. Microsoft IIS
29. Microsoft SQL Server
30. Microsoft Windows (PowerShell)
31. Palo Alto Networks Panorama
32. Radware Alteon ADC
33. VMware NSX (AVI)

Set up a new machine discovery schedule¶

1. From the CAPI Store drop down, select the certificate store you want the certificate installed in.
2. Click the Exclude Expired toggle switch to exclude discovery of expired certificates associated with this new machine.
3. Click the Exclude Inactive toggle switch to exclude discovery of inactive certificates associated with this new machine.
4. Click the Schedule toggle switch to enable machine discovery scheduling with this new machine.
5. Under Repeat every, select your desired daily, weekly, or monthly schedule. Then, choose your desired time. !!! note The Schedule toggle switch must be enabled to configure machine discovery scheduling timeframes.
6. Click Continue.

Set up a new machine provisioning schedule¶

1. Click the Schedule toggle switch to enable machine provisioning scheduling with this new machine.
2. Under Repeat every, select your desired daily, weekly, or monthly schedule. Then, choose your desired time. !!! note The Schedule toggle switch must be enabled to configure machine provisioning scheduling timeframes.
3. Click Finish.