Gathering required information

Use this topic as a worksheet for gathering information you'll be required to use while configuring certificate enrollment using DigiCert.

Before continuing, make sure you have completed the prerequisite steps common to most supported CAs. If not, review About CA driver prerequisites.

For each DigiCert certificate product you issue through Trust Protection Foundation, you must configure a unique CA template that corresponds to a specific DigiCert product.

When you begin configuring Trust Protection Foundation to enroll and issue DigiCert certificates, you'll need the following information:

  1. Make sure you've granted 443 network access that is required for Trust Protection Foundation servers configured for certificate management.

  2. Get a valid API Key and password credential.

    • Provisioned for API-automated certificate issuance.

  3. Indicate each certificate type you intend to manage through Palo Alto Networks.

  4. Procure an API credential for Trust Protection Foundation.

NOTE  The list of products available is based on the API key used to authenticate to the DigiCert CA.

Certificate Type

Will this type be managed?
SSL Plus
SSL Multi-domain  
SSL Wildcard  
SSL EV Plus  
SSL EV Multi Domain  

Secure Email for Employee

 

Secure Email for Individual Mailbox

 

Secure Email for Organization

 

Secure Email (S/MIME) considerations

If you plan to manage Secure Email (S/MIME) certificates:

  • At least one Email Subject Alternative Name (SAN) is required in the certificate request.

  • The email address must be in a valid email format.

  • Additional certificate request fields appear when a Secure Email product is selected.

  • DigiCert may enforce identity validation requirements based on the selected Secure Email product.

Secure Email certificates use the same DigiCert CertCentral CA template configuration workflow as TLS certificates. Field-level configuration details are described in DigiCert CertCentral—certificate settings.

What's next?

In Trust Protection Foundation, create and configure a DigiCert CA template.

For specific information about DigiCert, see Configuring the DigiCert CA template object.

For general information, see Step 1: Create CA templates from the section Getting started: automating certificate enrollment and provisioning.