Keyfactor

Basic Keyfactor Integration that Posts CSR and Retrieves the certificates.

Network Security · Keyfactor

Details

IDKeyfactor
ProviderKeyfactor
CategoryNetwork Security
From Version6.0.0
Docker Imagedemisto/auth-utils:1.0.0.3562326
Supported ModulesAgentix XSIAM

README

keyfactor-get-enrollment-csr


Retrieve a list of Certificate Templates

Base Command

keyfactor-get-enrollment-csr

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path Type Description
Keyfactor.CSRTemplate.Lists.Name string list of csr template name

keyfactor-post-enrollment-csr


Send CSR request and return certificate info

Base Command

keyfactor-post-enrollment-csr

Input

Argument Name Description Required
csr_base64 Certificate Signing Request in Base64 format. Required
cert_authority Certificate Authority. Required
include_chain Include Certificate Chain. Possible values are: true, false. Default is true. Required
template Certificate Template. Required
sans_ip4 Subject Alternative Names IP addresses. Optional
metadata Metadata. Required
keyAlgorithm the key algorithm. Optional

Context Output

Path Type Description
Keyfactor.CSRTemplate.Lists.SerialNumber string Certificate Serial Number
Keyfactor.CSRTemplate.Lists.IssuerDN string Certificate Issuer Domain
Keyfactor.CSRTemplate.Lists.Thumbprint string Certificate Thumb Print
Keyfactor.CSRTemplate.Lists.KeyfactorID number Certificate KeyfactorID
Keyfactor.CertInfo.Lists.Certificates string List of Certificates
Keyfactor.CertInfo.Lists.RequestDisposition string Certificate Request Disposition
Keyfactor.CertInfo.Lists.DispositionMessage string Certificate Request Disposition Message
Keyfactor.CertInfo.Lists.EnrollmentContext string Certificate Request Enrollment Context
Keyfactor.CertInfo.Lists.KeyfactorRequestId number Certificate Request ID
Keyfactor.CertInfo.Lists.formated_cert string Formatted Certificate without Trust Chain
Keyfactor.CertInfo.Lists.formated_chain string Formatted Certificate’s Trust Chain

Configuration parameters

  • host — API URL (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • credentials — Username (required)

Commands (2)

  • keyfactor-get-enrollment-csr

    Retrieve a list of Certificate Templates

  • keyfactor-post-enrollment-csr

    Send CSR request and return certificate info

category: Network Security
provider: Keyfactor
commonfields:
  id: Keyfactor
  version: -1
configuration:
- display: API URL
  name: host
  required: true
  type: 0
- defaultvalue: "false"
  display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
- display: Username
  displaypassword: Password
  name: credentials
  required: true
  type: 9
description: "Basic Keyfactor Integration that Posts CSR and Retrieves the certificates."
display: Keyfactor
name: Keyfactor
script:
  commands:
  - arguments: []
    description: Retrieve a list of Certificate Templates
    name: keyfactor-get-enrollment-csr
    outputs:
    - contextPath: Keyfactor.CSRTemplate.Lists.Name
      description: list of csr template name.
      type: string
  - arguments:
    - description: Certificate Signing Request in Base64 format.
      name: csr_base64
      required: true
      type: textArea
    - description: Certificate Authority.
      name: cert_authority
      required: true
      type: textArea
    - auto: PREDEFINED
      defaultValue: "true"
      description: Include Certificate Chain.
      name: include_chain
      predefined:
      - "true"
      - "false"
      required: true
      type: textArea
    - description: Certificate Template.
      name: template
      required: true
      type: textArea
    - description: Subject Alternative Names IP addresses.
      name: sans_ip4
      type: textArea
    - description: Metadata.
      name: metadata
      required: true
      type: unknown
    - name: keyAlgorithm
      description: the key algorithm.
      type: textArea
    description: Send CSR request and return certificate info
    name: keyfactor-post-enrollment-csr
    outputs:
    - contextPath: Keyfactor.CSRTemplate.Lists.SerialNumber
      description: Certificate Serial Number.
      type: string
    - contextPath: Keyfactor.CSRTemplate.Lists.IssuerDN
      description: Certificate Issuer Domain.
      type: string
    - contextPath: Keyfactor.CSRTemplate.Lists.Thumbprint
      description: Certificate Thumb Print.
      type: string
    - contextPath: Keyfactor.CSRTemplate.Lists.KeyfactorID
      description: Certificate KeyfactorID.
      type: number
    - contextPath: Keyfactor.CertInfo.Lists.Certificates
      description: List of Certificates.
      type: string
    - contextPath: Keyfactor.CertInfo.Lists.RequestDisposition
      description: Certificate Request Disposition.
      type: string
    - contextPath: Keyfactor.CertInfo.Lists.DispositionMessage
      description: Certificate Request Disposition Message.
      type: string
    - contextPath: Keyfactor.CertInfo.Lists.EnrollmentContext
      description: Certificate Request Enrollment Context.
      type: string
    - contextPath: Keyfactor.CertInfo.Lists.KeyfactorRequestId
      description: Certificate Request ID.
      type: number
    - contextPath: Keyfactor.CertInfo.Lists.formated_cert
      description: Formatted Certificate without Trust Chain.
      type: string
    - contextPath: Keyfactor.CertInfo.Lists.formated_chain
      description: Formatted Certificate's Trust Chain.
      type: string
  dockerimage: demisto/auth-utils:1.0.0.3562326
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)