Enterprise Integrations & CA Connectors

Technical parameters and setup guides for CAs, web servers, firewalls, and load balancers.

Certificate Authorities (CA Connectors)

Connectors responsible for CSR submission, domain validation, and certificate issuance.

GlobalSign SSLNG / Atlas API

Automate OV/EV enterprise certificates via GlobalSign RESTful API using mutual TLS client authentication.

Auth Mode: mTLS (Client Certificate + Private Key)
Endpoint: https://system.globalsign.com/kb/rest/services/v1
Features: Instant issuance, SAN support, Auto-approval

Let's Encrypt (ACME v2)

Standard RFC 8555 ACME client for automated DV certificate lifecycle and multi-domain renewals.

Protocol: ACME v2 (RFC 8555)
Directory: https://acme-v02.api.letsencrypt.org/directory
Validation: HTTP-01 Webroot / Standalone & DNS-01

Supported Target Devices & Deployment Modules

All hardware appliances and server platforms natively supported for automated SSL/TLS installation and binding.

Microsoft IIS

Microsoft Windows IIS

IIS / IIS Client

Automatic PFX import into Local Computer Certificate Store and WebBinding SSL update via PowerShell/WinRM or Agent.

Transport: WinRM (Ports: 5985/5986) or CertCycle Agent Daemon
Module: Microsoft.Web.Administration / WebAdministration
Target: Default Web Site & Custom SNI Bindings (Port 443)
Nginx

Nginx Web Server & Reverse Proxy

SSH / SCP

SCP/SFTP deployment of certificate & private key bundle followed by syntax test and zero-downtime reload.

Transport: OpenSSH (Port 22)
Files: fullchain.pem, privkey.pem
Reload Command: nginx -t && systemctl reload nginx
Apache HTTP

Apache HTTP Server

mod_ssl / SSH

Deploys SSLCertificateFile, Key, and Chain files to Apache hosts followed by apachectl -k graceful.

Transport: OpenSSH (Port 22)
Directives: SSLCertificateFile, SSLCertificateKeyFile, SSLCertificateChainFile
Reload Command: apache2ctl graceful / systemctl reload httpd
HAProxy

HAProxy Load Balancer

Combined PEM

Combines public certificate, intermediate chain, and private key into a single PEM bundle for HAProxy frontend binding.

Transport: OpenSSH / HAProxy Runtime API Socket
Format: Combined Certificate + Private Key (.pem)
Reload: set ssl cert / systemctl reload haproxy
F5 BIG-IP

F5 BIG-IP (LTM & SSL Orchestrator)

iControl REST / SSH

Automated SSL/TLS certificate & key upload to F5 filestore and binding to Client SSL profiles via iControl REST API.

API: F5 iControl REST (/mgmt/tm/sys/file/ssl-cert)
Profiles: Client SSL / Server SSL Profiles
Features: High Availability Sync-Failover Group Support
Check Point

Check Point Firewall & Gateway

Management Web API

Automatic installation and binding of HTTPS Inspection and gateway certificates via Check Point Management Web API.

API: Check Point Management Web API (Port 4434 / 443)
Features: Inbound Inspection, Outbound Inspection, Portal Certs
Install: Automatic policy verification and install-policy
Darktrace

Darktrace Cyber AI Appliance

REST API

Automated renewal and configuration of TLS management certificates on Darktrace Cyber AI appliances via REST API.

Protocol: Darktrace Enterprise API / HTTPS
Features: Web GUI Certificate & Ingestion Channel SSL Update
Validation: Health check & handshake verification
Symantec SSL Visibility

Symantec SSL Visibility (SSLVA)

Broadcom SSLVA API

Automated certificate and private key injection for encrypted traffic inspection on Broadcom/Symantec SSLVA.

Protocol: Broadcom SSL Visibility RESTful API (HTTPS)
Features: Inbound Decryption Keys, PKI Store Synchronization
Validation: Active inspection status validation