Integration guides for Trust Lifecycle Manager

Instructions and comprehensive guides for integrating different vendors and platforms with your DigiCert® Trust Lifecycle Manager ecosystem.

CA vendors

Discover, issue, and manage certificates from different certificate authorities (CAs).

Vendor/Platform	Integration methods
AWS Private CA	Connector
DigiCert CertCentral	Connector
DigiCert On-prem CA	Connector
Entrust	Connector
Let's Encrypt	Connector
Microsoft CA server	Connector
Sectigo	Connector

Network appliances

Discover and manage the certificates installed on dedicated network appliances.

Vendor/Platform	Integration methods
A10	Connector
Citrix Netscaler ADC	Connector
F5 BIG-IP LTM	Connector
Others (extensibility)	Plugin

Cloud / Hyperscalers

Discover and manage certificates in cloud platforms.

Vendor/Platform	Integration methods
Amazon Web Services (AWS)	Connector
Azure Key Vault	Connector
Google Cloud Platform (GCP)	Connector
Others (extensibility)	Plugin

MDM / UEM

Get certificates for mobile device management (MDM) and unified endpoint management (UEM) platforms.

Vendor/Platform	Integration methods
Microsoft Intune	Connector SCEP
Ivanti EPMM	REST API SCEP
Jamf Pro	REST API SCEP
Iru (formerly Kandji)	SCEP
SOTI MobiControl	SCEP
Workspace ONE	REST API

Service management

Incorporate certificates and lifecycle activities from Trust Lifecycle Manager into service management platforms.

Vendor/Platform	Integration methods
Jira	Email (notifications)
ServiceNow	Connector ServiceNow app

DevOps

Manage and automate certificates for DevOps platforms.

Vendor/Platform	Integration methods
Ansible	ACME
Chef	ACME REST API
Istio	ACME
Puppet	ACME REST API
SaltStack	ACME REST API
Terraform	REST API

Identity / Access

Facilitate authentication and credential management.

Vendor/Platform	Integration methods
BeyondTrust	Connector
CyberArk	Connector
Citrix FAS	DigiCert® Autoenrollment Server
Windows Hello for Business	DigiCert® Autoenrollment Server
Intercede MyID	REST API
Versasec vSEC:CMS	REST API

Key management

Get certificates for hardware tokens, keystores, and key management platforms.

Vendor/Platform	Integration methods
Azure Key Vault	Connector
HashiCorp Vault	Vault plugin
GBS IQ.Suite KeyManager	CMP
IBM Global Security Kit (GSK)	Managed automation (DigiCert agents)
Java KeyStore (JKS)	Managed automation (DigiCert agents)
Microsoft Platform Crypto Provider—Trusted Platform Module (TPM)	DigiCert® Autoenrollment Server DigiCert® Trust Assistant
SafeNet Network HSM	DigiCert® Autoenrollment Server
SafeNet DPoD Cloud HSM	DigiCert® Autoenrollment Server
SafeNet/Gemalto eToken	DigiCert® Trust Assistant
Yubico YubiKey	DigiCert® Trust Assistant

Discovery scanning

Import discovery data from external scanning providers for monitoring and management in Trust Lifecycle Manager.

Vendor/Platform	Integration methods
Qualys	Connector
Tenable	Connector
Others (extensibility)	Plugin

DNS providers

Automate domain validation processes when issuing public TLS certificates through Trust Lifecycle Manager.

Vendor/Platform	Integration methods
UltraDNS	Connector
DNS Made Easy	Connector
Self-hosted	Connector (RFC 2136)
Others (150+ providers)	Connector

Desktops / Users

Enroll and deliver/install certificates for end users.

Vendor/Platform	Integration methods
macOS	DigiCert® Trust Assistant
Microsoft Windows	DigiCert® Trust Assistant
Microsoft Active Directory (AD) domains	DigiCert® Autoenrollment Server

Servers / Web applications

Discover, enroll, and manage certificates for web applications on dedicated servers, including automated certificate delivery and installation.

Important

Note:

The managed automation solution provides the most comprehensive integration option for servers, including discovery and centralized management of certificates using the Trust Lifecycle Manager web console or REST API.
Alternatively, you can use Trust Lifecycle Manager's ACME automation service to request and manage certificates using the server command-line interface (CLI).

Web application	Operating system	Integration methods
Apache HTTP Server	Linux Windows	Managed automation (DigiCert agents) ACME (third-party clients)
Apache Tomcat	Linux Windows	Managed automation (DigiCert agents) ACME (third-party clients)
IBM HTTP Server	Linux Windows	Managed automation (DigiCert agents) ACME (third-party clients)
Nginx	Linux Windows	Managed automation (DigiCert agents) ACME (third-party clients)
Microsoft IIS	Windows	Managed automation (DigiCert agents) ACME (third-party clients)
Custom server applications	Linux Windows	Automated delivery with custom post-scripts (DigiCert agents) ACME (third-party clients)

Other vendors and platforms

Note

DigiCert has verified support for Trust Lifecycle Manager with these additional vendors and platforms. The following GitHub repository provides tools and resources to help set up these integrations:

https://github.com/digicert/product-solutions

Akamai
Azure AKS
Azure App Proxy
Azure DevOps
Azure Web App
Cloudflare
F5 Distributed Cloud (XC)
FortiGate
FortiNAC
FortiWeb
Google GCP Apigee
HAProxy (Enterprise and open source)
Imperva
Kemp LoadMaster
Kubernetes
Microsoft Exchange Server
Microsoft IIS DPAPI
Microsoft IIS SMTP Server
Microsoft Remote Desktop Protocol (RDP)
Microsoft Remote Desktop Services (RDS)
Microsoft SQL Server (MSSQL)
Nginx Mailcow
Oracle WebLogic Server
Palo Alto Firewall
Red Hat Satellite
Sophos
VMware Avi Load Balancer