Integrating Sectigo Certificate Manager with PAM360

PAM360 integrates with Sectigo Certificate Manager (SCM), a PKI management platform that specializes in managing SSL/TLS certificates, SSH keys, and various other digital identities. The integration leverages SCM's API and allows PAM360 to act as a centralized platform where you can import and manage SSL/TLS certificates from the SCM. Automate the lifecycle management of these certificates through diverse operations that are supported by the integration.

In this document, you will learn the steps to manage the lifecycle of SSL/TLS certificates issued by the SCM, which includes importing existing orders, creating new certificate requests, deployment, and renewal of certificates.

  1. Setting up Sectigo Certificate Manager in PAM360
  2. Importing Existing Orders
  3. Create a New Certificate Order
  4. Checking Order Status
  5. Managing Certificates Issued by Sectigo Certificate Manager

Caution

Add the following base URL and port as an exception in your firewall/proxy to permit PAM360 to connect to the SCM.

1. Setting up Sectigo Certificate Manager in PAM360

To begin managing SSL certificates issued by Sectigo from PAM360, you must add your SCM account in PAM360 and link your unique Customer URI. If you do not have an SCM account, contact the Sectigo team to sign up and get your login credentials and the Customer URI. If you have an SCM account, follow the below steps to link your account with PAM360 and begin the integration process.

  1. Log in to the PAM360 web interface, navigate to Certificates >> Sectigo and click Manage.
    sectigo-1
  2. Under Account, enter your SCM User Name, Password, your unique Customer URI and click Save. This is a one-time operation. You can find your Customer URI suffixed in the SCM login URL as shown below:
    sectigo-2
  3. The SCM account details are saved and it is now successfully linked to your PAM360 account.

    Caution

    • For this integration to work as expected, the SCM account you are using should have the MRAO Admin user role in the Sectigo portal.
    • The user profile under the SCM account you are using must contain pre-validated domains and organizations. To send certificate requests, PAM360 fetches the existing domains, organizations, and certificate profiles from the SCM. Since the SCM issues certificates based on certificate profiles and pre-validated domains, this step is vital to ensure success of the integration.
  4. Once the integration is complete, all the organizations, domains, and certificate profiles listed in your SCM account will be imported into PAM360 and displayed under individual tabs, along with their ID and status. This information is updated once a week through an automated schedule. To manually sync your account, click the Sync option available under each tab.
    sectigo-3

2. Importing Existing Orders

If you have an active SCM account, you likely have existing certificate orders that can be managed using the Sectigo Certificate Manager. Apart from creating new certificate orders, you can also import all the existing orders from the SCM portal and manage them from the PAM360 interface.

  1. Navigate to the Certificates >> Sectigo tab in PAM360.
  2. Click More >> Import Existing Orders from the top menu.
    sectigo-4
  3. Select the required option and click Import.
  4. All the existing certificate orders associated with your SCM account are imported into PAM360.

3. Creating a New Certificate Order

Once you have successfully linked your SCM account with PAM360, you can start creating new certificate orders directly from PAM360. To place a new certificate order:

  1. Navigate to the Certificates >> Sectigo tab and click Order Certificate.
  2. In the window that opens, enter the following attributes: Common Name, SAN, Organization, Certificate Profile, Term, Key Algorithm, Key Size, Keystore Type, Keystore Password, Comments, and External Requester Emails.
    sectigo-5
  3. Ensure that you have selected the appropriate Certificate Profile. Also, ensure that the comment does not exceed 1024 characters.
  4. Verify your details and click Create.

    Caution

    If you find any mismatch in the SCM-related details that are displayed here, please verify the details in the Sectigo portal and then perform a manual sync under Sectigo >> Manage in the PAM360 interface to refresh the details.

4. Checking Order Status

Once a certificate order is successfully created, you can view it under the Certificates >> Sectigo tab along with the certificate order status.

To track the certificate availability for an order,

  1. To track the certificate availability for an order, select the order and click Check Order Status from the top menu.
    sectigo-6
  2. Once a certificate is issued, it is fetched and added to the PAM360 certificate repository. You will be able to view it under Certificates >> Certificates.
  3. Typically, the status of your certificate orders is checked automatically every day through a schedule. This way, whenever a certificate is available, it is fetched and added to the PAM360 certificate repository.

    Caution

    The certificates that are issued are automatically added to PAM360 only if you have the required license count. If not, you must renew your PAM360 license before attempting to import any certificates.

5. Managing Certificates Issued by Sectigo Certificate Manager

You can renew, revoke, delete, or request reissue of certificates, or cancel certificate orders from PAM360.

5.1 Renewing Certificate

  1. Navigate to Certificates >> Sectigo.
  2. Select the required certificate and click Renew Certificate from the top menu.

Upon successful validation, the certificate is issued and will be automatically added to the PAM360 certificate repository.

5.2 Reissuing Certificates

  1. Navigate to Certificates >> Sectigo.
  2. Select the required certificate and click Reissue Certificate from the top menu.

Upon successful validation, the certificate is issued and will be automatically added to the PAM360 certificate repository.

5.3 Revoking Certificates

  1. Navigate to Certificates >> Sectigo.
  2. Select the required certificate and click More >> Revoke Certificate from the top menu.
  3. The certificate is revoked. Go to the Certificates >> Certificates tab and delete the certificate to remove it from the PAM360 repository.
    sectigo-7

5.4 Deleting Certificates

  1. Navigate to the Certificates >> Sectigo tab.
  2. Select the required order and click More >> Delete from the top menu.
  3. The certificate request is deleted from PAM360.

    Caution

    The Delete option only removes the certificate from the PAM360 interface, and you can no longer manage it from the product. However, it does not delete the certificate request from the SCM—the certificate can still be viewed and managed from the SCM portal.




Top