You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| allowInvalidCert | Allow Invalid Cert on A10 Management API || Bool | true | ✅ Checked |
328
+
| allowInvalidCert | Allow Invalid Cert on A10 Management API |Boolean value specifying whether to allow connections to the A10 vThunder management API when it presents an invalid or self-signed SSL/TLS certificate. Set to true to bypass certificate validation for AXAPI connections.| Bool | true | ✅ Checked |
329
329
330
330
The Custom Fields tab should look like this:
331
331
@@ -568,12 +568,12 @@ the Keyfactor Command Portal
568
568
569
569
| Name | Display Name | Description | Type | Default Value/Options | Required |
| OrchToScpServerIp | Orch To Scp Server Ip || String || ✅ Checked |
572
-
| ScpPort | Port Used For Scp || String || ✅ Checked |
573
-
| ScpUserName | UserName Used For Scp || Secret || ✅ Checked |
574
-
| ScpPassword | Password Used For Scp || Secret || ✅ Checked |
575
-
| A10ToScpServerIp | A10 Device To Scp Server Ip || String || ✅ Checked |
576
-
| allowInvalidCert | Allow Invalid Cert on A10 Management API || Bool | true | ✅ Checked |
571
+
| OrchToScpServerIp | Orch To Scp Server Ip |IP address or hostname of the SCP server that the Universal Orchestrator will connect to for uploading certificate files. This SCP server acts as an intermediary storage location before the A10 device retrieves the certificates.| String || ✅ Checked |
572
+
| ScpPort | Port Used For Scp |TCP port number used for SSH/SCP connections to the SCP server. Typically port 22 for standard SSH/SCP operations.| String || ✅ Checked |
573
+
| ScpUserName | UserName Used For Scp |Username credential for authenticating to the SCP server. This account must have write permissions to the target directory path specified in the certificate store configuration. Supports PAM integration for secure credential retrieval.| Secret || ✅ Checked |
574
+
| ScpPassword | Password Used For Scp |Password credential for authenticating to the SCP server. Used in conjunction with ScpUserName for SSH/SCP authentication. Supports PAM integration for secure credential retrieval.| Secret || ✅ Checked |
575
+
| A10ToScpServerIp | A10 Device To Scp Server Ip |IP address or hostname that the A10 vThunder device uses to connect to the SCP server for retrieving certificate files. This may differ from OrchToScpServerIp due to network topology, routing, or firewall configurations where the A10 device and orchestrator access the SCP server through different network paths.| String || ✅ Checked |
576
+
| allowInvalidCert | Allow Invalid Cert on A10 Management API |Boolean value specifying whether to allow connections to the A10 vThunder management API when it presents an invalid or self-signed SSL/TLS certificate. Set to true to bypass certificate validation for AXAPI connections used during the certificate installation process.| Bool | true | ✅ Checked |
577
577
578
578
The Custom Fields tab should look like this:
579
579
@@ -663,7 +663,7 @@ The a10vThunder Universal Orchestrator extension implements 2 Certificate Store
663
663
| Client Machine ||
664
664
| Store Path ||
665
665
| Orchestrator | Select an approved orchestrator capable of managing `ThunderSsl` certificates. Specifically, one with the `ThunderSsl` capability. |
666
-
| allowInvalidCert ||
666
+
| allowInvalidCert |Boolean value specifying whether to allow connections to the A10 vThunder management API when it presents an invalid or self-signed SSL/TLS certificate. Set to true to bypass certificate validation for AXAPI connections.|
667
667
668
668
</details>
669
669
@@ -689,7 +689,7 @@ The a10vThunder Universal Orchestrator extension implements 2 Certificate Store
689
689
| Client Machine ||
690
690
| Store Path ||
691
691
| Orchestrator | Select an approved orchestrator capable of managing `ThunderSsl` certificates. Specifically, one with the `ThunderSsl` capability. |
692
-
| Properties.allowInvalidCert ||
692
+
| Properties.allowInvalidCert |Boolean value specifying whether to allow connections to the A10 vThunder management API when it presents an invalid or self-signed SSL/TLS certificate. Set to true to bypass certificate validation for AXAPI connections.|
693
693
694
694
3. **Import the CSV file to create the certificate stores**
695
695
@@ -745,12 +745,12 @@ Please refer to the **Universal Orchestrator (remote)** usage section ([PAM prov
745
745
| Client Machine ||
746
746
| Store Path ||
747
747
| Orchestrator | Select an approved orchestrator capable of managing `ThunderMgmt` certificates. Specifically, one with the `ThunderMgmt` capability. |
748
-
| OrchToScpServerIp ||
749
-
| ScpPort ||
750
-
| ScpUserName ||
751
-
| ScpPassword ||
752
-
| A10ToScpServerIp ||
753
-
| allowInvalidCert ||
748
+
| OrchToScpServerIp |IP address or hostname of the SCP server that the Universal Orchestrator will connect to for uploading certificate files. This SCP server acts as an intermediary storage location before the A10 device retrieves the certificates.|
749
+
| ScpPort |TCP port number used for SSH/SCP connections to the SCP server. Typically port 22 for standard SSH/SCP operations.|
750
+
| ScpUserName |Username credential forauthenticating to the SCP server. This account must have write permissions to the target directory path specifiedin the certificate store configuration. Supports PAM integration for secure credential retrieval.|
751
+
| ScpPassword |Password credential forauthenticating to the SCP server. Usedin conjunction with ScpUserName for SSH/SCP authentication. Supports PAM integration for secure credential retrieval.|
752
+
| A10ToScpServerIp |IP address or hostname that the A10 vThunder device uses to connect to the SCP server for retrieving certificate files. This may differ from OrchToScpServerIp due to network topology, routing, or firewall configurations where the A10 device and orchestrator access the SCP server through different network paths.|
753
+
| allowInvalidCert |Boolean value specifying whether to allow connections to the A10 vThunder management API when it presents an invalid or self-signed SSL/TLS certificate. Set to true to bypass certificate validation for AXAPI connections used during the certificate installation process.|
754
754
755
755
</details>
756
756
@@ -776,12 +776,12 @@ Please refer to the **Universal Orchestrator (remote)** usage section ([PAM prov
776
776
| Client Machine ||
777
777
| Store Path ||
778
778
| Orchestrator | Select an approved orchestrator capable of managing `ThunderMgmt` certificates. Specifically, one with the `ThunderMgmt` capability. |
779
-
| Properties.OrchToScpServerIp ||
780
-
| Properties.ScpPort ||
781
-
| Properties.ScpUserName ||
782
-
| Properties.ScpPassword ||
783
-
| Properties.A10ToScpServerIp ||
784
-
| Properties.allowInvalidCert ||
779
+
| Properties.OrchToScpServerIp |IP address or hostname of the SCP server that the Universal Orchestrator will connect to for uploading certificate files. This SCP server acts as an intermediary storage location before the A10 device retrieves the certificates.|
780
+
| Properties.ScpPort |TCP port number used for SSH/SCP connections to the SCP server. Typically port 22 for standard SSH/SCP operations.|
781
+
| Properties.ScpUserName |Username credential forauthenticating to the SCP server. This account must have write permissions to the target directory path specifiedin the certificate store configuration. Supports PAM integration for secure credential retrieval.|
782
+
| Properties.ScpPassword |Password credential forauthenticating to the SCP server. Usedin conjunction with ScpUserName for SSH/SCP authentication. Supports PAM integration for secure credential retrieval.|
783
+
| Properties.A10ToScpServerIp |IP address or hostname that the A10 vThunder device uses to connect to the SCP server for retrieving certificate files. This may differ from OrchToScpServerIp due to network topology, routing, or firewall configurations where the A10 device and orchestrator access the SCP server through different network paths.|
784
+
| Properties.allowInvalidCert |Boolean value specifying whether to allow connections to the A10 vThunder management API when it presents an invalid or self-signed SSL/TLS certificate. Set to true to bypass certificate validation for AXAPI connections used during the certificate installation process.|
785
785
786
786
3. **Import the CSV file to create the certificate stores**
787
787
@@ -801,8 +801,8 @@ If a PAM provider was installed _on the Universal Orchestrator_ in the [Installa
801
801
| --------- | ----------- |
802
802
| ServerUsername | Username to use when connecting to server |
803
803
| ServerPassword | Password to use when connecting to server |
804
-
| ScpUserName ||
805
-
| ScpPassword ||
804
+
| ScpUserName |Username credential forauthenticating to the SCP server. This account must have write permissions to the target directory path specifiedin the certificate store configuration. Supports PAM integration for secure credential retrieval.|
805
+
| ScpPassword |Password credential forauthenticating to the SCP server. Usedin conjunction with ScpUserName for SSH/SCP authentication. Supports PAM integration for secure credential retrieval.|
806
806
807
807
Please refer to the **Universal Orchestrator (remote)** usage section ([PAM providers on the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam)) for your selected PAM provider for instructions on how to load attributes orchestrator-side.
808
808
> Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself.
0 commit comments