Sectigo Releases Industry-First PKI DevOps Integrations for 5 Configuration Management and Orchestration Platforms
September 11, 2019

Sectigo released integrations with five of the most popular DevOps configuration management and container orchestration platforms.

The additions of Docker, Kubernetes, Ansible, Terraform, and soon HashiCorp Vault, deliver the industry’s most comprehensive PKI solution for DevOps. This unique combination of solutions will immediately help IT teams ensure their DevOps environments follow accepted security practices, meet compliance and auditability requirements, and provide crypto agility.

“All sizeable enterprises either use or are implementing DevOps today,” said Lindsay Kent, VP of Product Management, Sectigo. “As they do so, these enterprises are also finding that they suddenly need to become PKI experts and must roll out their own PKI to ensure identity for containers and related services.”

This exercise puts the enterprise in jeopardy as IT generalists must suddenly select, configure, and implement public key schemes without the benefit of background in this specialized field. Considerations like key size, certificate term length, and code deployment process all affect the security and compliance of containerized environments. As operations spin up DevOps environments, they often find themselves forced to make decisions about these and other aspects of PKI even though they may not understand the full consequences of these choices.

“These integrations between Sectigo Certificate Manager and the most popular DevOps orchestration tools give operations teams full visibility and control over the certificate properties they choose. An expert partner, like Sectigo, can ensure enterprises follow accepted security practices and can keep implementations current with changes in cryptography needed to stay safe in a changing computing environment,” added Kent.

The variety of certificates and specific use cases in any given DevOps environment is quite broad, as these are complex environments using many different technologies in conjunction. Supporting integrations with a variety of orchestration tools helps cover the enterprise’s complete operational footprint. Sectigo Certificate Manager integrates with supported tools using ACME (Automated Certificate Management Environment) or Sectigo’s RESTful APIs.

“Certificate-based authentication is a foundational element in many DevOps use cases, and one that often grows in complexity when an enterprise considers details such as public versus private servers, client authentication, and more,” said Fernando Montenegro, Principal Analyst, 451 Research. “We see a notable benefit for organizations to be able to use certificate management platforms that can address this complexity while integrating with popular configuration management and orchestration tools.”

IT teams will notably benefit from a centralized management platform that can be used to enforce the security policies across the organization. The Sectigo Certificate Manager platform is used by hundreds of enterprises across the globe to issue, renew, and manage certificates for their mission-critical applications. That means DevOps teams benefit from the reliability and speed of issuance that comes with a proven platform. In addition, if enterprises prefer, they can continue to use their DevOps tool or another PKI implementation for issuance and still use Sectigo Certificate Manager to monitor and report on their certificate deployments.

Sectigo’s latest integrations to its Certificate Management platform include:

- Docker — Allows DevOps teams to more easily create, deploy and run applications, delivering even greater value when paired with solutions like Kubernetes. By integrating with Docker, Sectigo can issue short lived public or private certificates to the applications running inside the Docker container.

- Kubernetes — Automates scaling, managing, updating, and removing containers, giving IT teams the flexibility needed to deliver applications consistently, no matter the size of the enterprise. Sectigo’s Kubernetes integration enables seamless certificate issuance and management using the Kubernetes native certificate controller.

- Ansible — Ansible-based automation aids lifecycle management for large certificate volumes in heterogeneous environments. By leveraging one of the leading tools in configuration management and server provisioning, Sectigo’s Ansible module eliminates complex security decision making and provides a transparent, platform-agonistic user experience for provisioning and managing TLS and client certificates.

- Terraform — This open-source tool creates, changes, and improves infrastructure. Sectigo’s Terraform integration enables the enrollment, collection, and revocation of certificates. Paired with HashiCorp Vault, Terraform provides secure storage for certificates and keys.

- HashiCorp Vault — HashiCorp Vault centrally manages and enforces access to secrets and systems based on trusted application sources and user identities. Sectigo Certificate Manager can assign certificates to applications protected by Vault and store keys and certificates used in DevOps environments.

Share this

Industry News

July 09, 2020

ShiftLeft released a new version of NextGen Static Analysis (NG SAST), including new workflows, purpose-built for developers that significantly improve security, while enhancing productivity.

July 09, 2020

RunSafe Security announced a partnership with JFrog that will enable RunSafe to supercharge binary protections via a simple plugin that JFrog users can deploy within their Artifactory repositories and instantly protect binaries and containers.

July 09, 2020

LeanIX closed $80 million in Series D funding led by new investor Goldman Sachs Growth.

July 08, 2020

Afi.ai introduced Afi Data Platform, a cloud-based replication and resiliency service that helps to monitor, predict downtime and recover K8s applications.

July 08, 2020

D2iQ announced the release of Conductor, a new interactive learning platform that enables enterprises to access hands-on cloud native courses and training.

July 08, 2020

SUSE entered into a definitive agreement to acquire Rancher Labs.

July 07, 2020

Micro Focus announced AI-powered enhancements to the intelligent testing capabilities of the UFT Family, a unified set of solutions designed to reduce the overall complexity of automating the functional testing processes.

July 07, 2020

Push Technology announced the launch of a new Service API capability for Diffusion Cloud, Push’s Real-Time API Management Cloud Platform.

July 07, 2020

Lightrun exited stealth and announced $4M in seed funding for the first complete continuous debugging and observability platform for production applications.

July 01, 2020

JFrog announced the launch of ChartCenter, a free, security-focused central repository of Helm charts for the community.

July 01, 2020

Kong announced a significant upgrade to open source Kuma, Kuma 0.6, available today.

July 01, 2020

Compuware Corporation, a BMC company, announced new capabilities that further automate and integrate test data and test case execution, empowering IT teams to achieve high-performance application development quality, velocity and efficiency.

June 30, 2020

Couchbase announced the general availability of Couchbase Cloud, a fully-managed Database-as-a-Service (DBaaS).

June 30, 2020

Split Software announced new capabilities designed to accelerate the adoption of feature flags in large-scale organizations.

June 30, 2020

WhiteHat Security announced a discounted Web + Mobile Application Security bundle to help organizations secure the digital future.