PkiResponse object

The PKI Response object describes application object settings for a HashiCorp Vault PKI secrets engine.

Input parameters

Name

Description
Certificate

The values to issue a new end user certificate to a CA for provisioning.

  • City: The City or Locality (L) field for the certificate Subject DN.
  • CommonName: The Common Name (CN) attribute of Subject Distinguished Name (DN).
  • Country: The Country (C) field for the certificate Subject DN.
  • Organization: The Organization (O) field for the certificate Subject DN.
  • OrganizationalUnits: An array of department or divisions within the organization (OU) that are responsible for maintaining the certificate.

  • SANs: An array of Subject Alternate Names (SANs) for the certificate.

    • Name: The SAN friendly name that corresponds to TypeName.
    • TypeName: One of the following HashiCorp SAN descriptions. DNS, RFC822, UPN, URI, IP.
  • State: The State (ST) field for the certificate Subject DN.
CreateCertificateAuthority

The status of the CA certificate:

  • true: The certificate is successfully enrolled.
  • false: Not currently enrolled.

CreatePKIRole

Works in conjunction with Roles. The setting to control role creation in the HashiCorp vault:

  • true: If one or more Roles is missing in the PkiPath, create them.
  • false: Default. Require that roles are already defined by the secrets engine.
FolderDn The distinguished name of the Policy folder.
Installation

Information about the HashiCorp vault:

  • CredentialDn: The device credential template.
  • Host: The HashiCorp IP address or name.
PkiPath

The path name of the HashiCorp Vault where the PKI secrets engine is mounted. This value appears in Trust Protection Platform as the Application object name.

Roles

An array of GUIDs for roles that are allowed to initiate a CSR in HashiCorp..