Product Capabilities: 2024¶
Entries from 2024. For the latest, see Product Capabilities.
New CA Connector using CA Connector Framework: Sectigo¶
26 November 2024
The CA Connector Framework is a powerful tool that allows developers to write custom connectors for CAs not supported out-of-the-box by Certificate Manager - SaaS. The new Sectigo connector is a fully-supported CA connector that also serves as an example of how you can connect a CA to Certificate Manager - SaaS using the Certificate Manager - SaaS interface. Learn more.
Certificate revocation workflow approval rules¶
1 November 2024
In addition to approval rules for issuance of certificates, Certificate Manager - SaaS now allows you to create approval rules for certificate revocation requests, allowing administrators to control who can approve or reject revocation requests, ensuring only authorized users can manage certificate revocations. This adds an extra layer of security and oversight to the certificate lifecycle management process. Learn more.
Zero Touch PKI supports certificate revocation¶
20 October 2024
Certificate Manager - SaaS now supports revocation of certificates issued by Zero Touch PKI. When the certificate was issued by Zero Touch PKI in your Certificate Manager - SaaS instance, the system automatically pre-selects the CA Account for the revocation request. If the certificate was discovered, you'll need to manually select the CA Account that originally issued the certificate, as only that account can request its revocation. Learn more
Workload Identity Manager support for custom IdP claims, and the ability to specify minimum TLS support¶
12 July 2024
When creating or editing a configuration for Workload Identity Manager there are two new options: First, you can specify the minimum version of TLS to allow for Workload Identity Manager connections. Second, you can now specify custom claim names for integration with identity providers (IdP). Learn more.
Workload Identity Manager connection to HSM for signing using an HSM-protected key¶
28 June 2024
You can connect an HSM to the Workload Identity Manager server (or container) to allow Workload Identity Manager to sign certificates using a private key protected by an HSM. Learn more.
Issue certificates from Let's Encrypt using a custom DNS provider¶
20 June 2024
ACMEv2 CA accounts can now use custom DNS providers beyond those natively supported by Certificate Manager - SaaS, allowing you to issue Let's Encrypt certificates using your preferred DNS provider. Learn more.
CyberArk Certificate Manager Operator for Red Hat OpenShift 1.0.0 released¶
29 May 2024
CyberArk Certificate Manager Operator for Red Hat OpenShift streamlines deployments of components for OpenShift by automating installation, maintenance, and upgrades. The CyberArk Certificate Manager Operator for Red Hat OpenShift is certified by Red Hat and available in the Red Hat Ecosystem catalog.
Key benefits:
- Deployment Packages: Platform operators can effortlessly select and deploy the necessary components for OpenShift tailored to the needs of their teams.
- Version Compatibility: Each release comes with a set of default component versions, which are tested together, improving user compatibility.
- Version Pinning: Specify precise versions of the Kubernetes components to ensure consistent deployments across diverse environments.
- Distributed Releases: Effortlessly manage releases across multiple Kubernetes clusters, facilitating complex multi-environment deployments.
- Upgrades: Seamlessly upgrade components, ensuring a smooth transition between versions.
Enhanced Service Account authentication with Workload Identity Federation¶
14 May 2024
Enhance your security and scalability with our latest Service Account update (Custom API Integration), featuring Workload Identity Federation. This advancement allows machines to securely access Certificate Manager - SaaS APIs without traditional API keys, aligning with modern enterprise authentication policies and providing greater access control through scopes. Designed to support PKI administrators in better serving modern application teams, this update facilitates improved VCert deployment and authentication in mass deployment scenarios, including support for VCert and Terraform provider integrations. Learn more
Provision with Cloudflare¶
30 April 2024
Exciting news! You now have the capability to easily provision certificates and perform machine-based discovery for your Cloudflare connectors. Learn more
Updated Certificate Manager - SaaS UI now available¶
8 April 2024
We've redesigned the Certificate Manager - SaaS UI to streamline your workflow. The new vertical menu structure simplifies navigation and brings efficiency to your certificate management tasks. The modern layout adjusts to your preferences, ensuring a user-friendly experience that enhances productivity. Sign in to Certificate Manager - SaaS and take it for a spin!
Certificate revocation now available for Microsoft AD CS¶
8 April 2024
Announcing the launch of the Certificate Revocation feature, a significant enhancement for administrators using Microsoft Active Directory Certificate Services (AD CS). This new functionality allows for the direct revocation of certificates issued through AD CS, streamlining security responses and certificate management. Whether through the user interface or the API, administrators can now efficiently manage the lifecycle of their certificates with detailed reasons for revocations and immediate insights into revocation statuses. Learn more
Scheduling functionality for Machine Provisioning¶
20 March 2024
Effortlessly run your machine provisioning by enabling the scheduling functionality on your machines. Learn more
Certificate provisioning for Google Cloud Provider¶
26 February 2024
You can now enable Certificate Manager - SaaS to provision new certificates in Google Cloud Provider (GCP) for use with Google services. Learn more