Delinea connector

Add a Delinea connector to retrieve credentials from your Delinea vaults. Once connected, you can use these credentials to authenticate other integration types in DigiCert® Trust Lifecycle Manager, streamlining configuration and centralizing credential management. Trust Lifecycle Manager supports both Delinea Platform and standalone Delinea Secret Server deployment types.

Before you begin

Before adding a Delinea secrets manager connector in Trust Lifecycle Manager, make sure the following prerequisites are satisfied.

DigiCert prerequisites

Your account must include the Secrets managers category under Integrations > Connectors > Add connector . For help verifying or enabling this feature, contact your DigiCert account representative.
You need at least one active DigiCert sensor to securely establish and manage the connection to your secrets manager instance. To learn more, see Deploy and manage sensors.
The DigiCert sensor must be able to connect to your Delinea instance over HTTPS (port 443).
For fault-tolerant connectivity, use multiple sensors to manage the connector. If one of the sensors fails, the connector automatically fails over to use one of the other sensors.

Delinea prerequisites

You need the base URL for your Delinea instance.
You need administrative access to your Delinea environment.
侧栏. Standalone Secret Server
If your environment is a standalone Secret Server, then perform the following configurations:
Configure a dedicated service account for Trust Lifecycle Manager to authenticate to Delinea Secret Server and retrieve secrets. Select the user type as Application Account and ensure that the account is enabled, and two-factor authentication is disabled.
Configure a role for Trust Lifecycle Manager with permission to view secrets. Assign the role to the service account and grant only the minimum permissions required to retrieve secret values.
Configure folder and secret permissions for the Trust Lifecycle Manager service account. Grant access to all folders and secrets that Trust Lifecycle Manager will retrieve.
Enable OAuth2 API access on the Delinea Secret Server instance to allow Trust Lifecycle Manager to retrieve secrets.
侧栏. Delinea Platform
If your environment is a Delinea Platform, then perform the following configurations:
Configure a Platform service user for Trust Lifecycle Manager in the Delinea Platform admin portal. Generate and securely store the Client ID and Client secret required for API authentication.
Configure vault access for the Platform service user. Grant access to the vaults containing the secrets that Trust Lifecycle Manager will retrieve.
Configure a dedicated Secret Server service account within the vault. Ensure the service account has permission to access the required secrets.
Save the Platform URL, Client ID, Client secret, Secret Server credentials, and Secret IDs required to configure the Delinea connector.

Add Delinea connector

To add a Delinea connector in Trust Lifecycle Manager:

From the Trust Lifecycle Manager menu, go to Integrations > Connectors .
Select the Add connector button.
In the Secrets manager section, select the option for Delinea.
Complete the form as described in the following steps.
Configure the general connector properties in the top section of the form:
- Name: Assign a friendly name to this connector.
- Business unit: Select a business unit for this connector. Only users assigned to this business unit can manage the connector.
- Managing sensor: Select one or more active DigiCert sensors to manage the integration.
  提示
  Selecting multiple sensors adds fault-tolerance to the integration. If one sensor fails, Trust Lifecycle Manager will automatically fail over and use one of the other sensors.
Under Link instance, select the deployment model for your Delinea connector. Trust Lifecycle Manager supports two deployment types, with different configuration options for each:
侧栏. Delinea Platform
Select this option if you use a Delinea Platform deployment. Trust Lifecycle Manager uses the Delinea Platform to access secrets.
Configure the following settings:
Base URL: Enter the URL of your Delinea instance.
Client ID: Enter the client ID configured in Delinea Platform.
Client secret: Enter the corresponding client secret for the client ID specified above.
侧栏. Standalone Secret Server
Select this option if you use a standalone Delinea Secret Server deployment type. Trust Lifecycle Manager connects directly to Secret Server to retrieve secrets.
Configure the following settings:
Base URL: Enter the URL of your Delinea instance.
Username: Enter the username for the Secret Server service account.
Password: Enter the corresponding password for the Secret Server service account.
Select Add to create the Delinea connector with the configured settings.

What's next

Once the Delinea connection is established, you can select it when configuring authentication for other connectors.
To reference a specific secret in the connected Delinea vault, provide the Secret ID or SecretID/FieldSlug from your Delinea instance. If no FieldSlug is specified, 'password' is used by default.
When you manage or rotate credentials in Delinea, the updated credentials are automatically applied wherever they are referenced in Trust Lifecycle Manager.
If a sensor cannot reach the Delinea vault, or if authentication or vault discovery fails, the affected connectors are marked Action needed and any associated automation flows are marked as failed with specific error details.

本节内容如下: