Skip to content

Commit a10c05a

Browse files
doebrowskdoebrowsk
authored
Merge 2.2.1 to main
2 parents 31c27da + d5713ee commit a10c05a

3 files changed

Lines changed: 75 additions & 12 deletions

File tree

‎CHANGELOG.md‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
2.2.1
2+
* Add ServerUsername and ServerPassword to the integration-manifest.json to add both fields to the README documentation.
3+
14
2.2.0
25
* Removed the ability to manage certificate/key file combinations uploaded but not yet installed on the Citrix ADC device. This was done due to issues centered around inconsistent naming of uploaded certificate and key files. From this release forward only installed certificate objects will be managed by this orchestrator extension.
36
* Modify process for renewing certificates to create new certificate/key files instead of deleting/re-adding existing so that no sub second outage occurs

‎README.md‎

Lines changed: 41 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,8 @@ To use the Citrix Netscaler Universal Orchestrator extension, you **must** creat
122122

123123
| Name | Display Name | Description | Type | Default Value/Options | Required |
124124
| ---- | ------------ | ---- | --------------------- | -------- | ----------- |
125+
| ServerUsername | Server Username | The Citrix username (or valid PAM key if the username is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. | Secret | | 🔲 Unchecked |
126+
| ServerPassword | Server Password | The Citrix password (or valid PAM key if the password is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. | Secret | | 🔲 Unchecked |
125127
| linkToIssuer | Link To Issuer | Determines whether an attempt will be made to link the added certificate (via a Management-Add job) to its issuing CA certificate. | Bool | false | 🔲 Unchecked |
126128

127129
The Custom Fields tab should look like this:
@@ -154,7 +156,7 @@ To use the Citrix Netscaler Universal Orchestrator extension, you **must** creat
154156
| --------- | ----------- | ----------- | ----------- |
155157
| Older than `11.0.0` | | | `net6.0` |
156158
| Between `11.0.0` and `11.5.1` (inclusive) | `net6.0` | | `net6.0` |
157-
| Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `Never` | `net6.0` |
159+
| Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `Disable` | `net6.0` |
158160
| Between `11.0.0` and `11.5.1` (inclusive) | `net8.0` | `LatestMajor` | `net8.0` |
159161
| `11.6` _and_ newer | `net8.0` | | `net8.0` |
160162

@@ -179,6 +181,12 @@ To use the Citrix Netscaler Universal Orchestrator extension, you **must** creat
179181
Refer to [Starting/Restarting the Universal Orchestrator service](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/StarttheService.htm).
180182
181183
184+
6. **(optional) PAM Integration**
185+
186+
The Citrix Netscaler Universal Orchestrator extension is compatible with all supported Keyfactor PAM extensions to resolve PAM-eligible secrets. PAM extensions running on Universal Orchestrators enable secure retrieval of secrets from a connected PAM provider.
187+
188+
To configure a PAM provider, [reference the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) to select an extension, and follow the associated instructions to install it on the Universal Orchestrator (remote).
189+
182190
183191
> The above installation steps can be supplimented by the [official Command documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/CustomExtensions.htm?Highlight=extensions).
184192
@@ -212,11 +220,28 @@ An optional config.json configuration file has been provided in the extensions f
212220
| Client Machine | The DNS or IP Address of the Citrix ADC Appliance. |
213221
| Store Path | The path where certificate files are located on the Citrix ADC appliance. This value will likely be /nsconfig/ssl/ |
214222
| Orchestrator | Select an approved orchestrator capable of managing `CitrixAdc` certificates. Specifically, one with the `CitrixAdc` capability. |
223+
| ServerUsername | The Citrix username (or valid PAM key if the username is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
224+
| ServerPassword | The Citrix password (or valid PAM key if the password is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
215225
| linkToIssuer | Determines whether an attempt will be made to link the added certificate (via a Management-Add job) to its issuing CA certificate. |
216226
217227
218228
219229
230+
<details><summary>Attributes eligible for retrieval by a PAM Provider on the Universal Orchestrator</summary>
231+
232+
If a PAM provider was installed _on the Universal Orchestrator_ in the [Installation](#Installation) section, the following parameters can be configured for retrieval _on the Universal Orchestrator_.
233+
| Attribute | Description |
234+
| --------- | ----------- |
235+
| ServerUsername | The Citrix username (or valid PAM key if the username is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
236+
| ServerPassword | The Citrix password (or valid PAM key if the password is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
237+
238+
239+
Please refer to the **Universal Orchestrator (remote)** usage section ([PAM providers on the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam)) for your selected PAM provider for instructions on how to load attributes orchestrator-side.
240+
241+
> Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself.
242+
</details>
243+
244+
220245
</details>
221246
222247
* **Using kfutil**
@@ -238,11 +263,26 @@ An optional config.json configuration file has been provided in the extensions f
238263
| Client Machine | The DNS or IP Address of the Citrix ADC Appliance. |
239264
| Store Path | The path where certificate files are located on the Citrix ADC appliance. This value will likely be /nsconfig/ssl/ |
240265
| Orchestrator | Select an approved orchestrator capable of managing `CitrixAdc` certificates. Specifically, one with the `CitrixAdc` capability. |
266+
| ServerUsername | The Citrix username (or valid PAM key if the username is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
267+
| ServerPassword | The Citrix password (or valid PAM key if the password is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
241268
| linkToIssuer | Determines whether an attempt will be made to link the added certificate (via a Management-Add job) to its issuing CA certificate. |
242269
243270
244271
245272
273+
<details><summary>Attributes eligible for retrieval by a PAM Provider on the Universal Orchestrator</summary>
274+
275+
If a PAM provider was installed _on the Universal Orchestrator_ in the [Installation](#Installation) section, the following parameters can be configured for retrieval _on the Universal Orchestrator_.
276+
| Attribute | Description |
277+
| --------- | ----------- |
278+
| ServerUsername | The Citrix username (or valid PAM key if the username is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
279+
| ServerPassword | The Citrix password (or valid PAM key if the password is stored in a KF Command configured PAM integration) to be used to log into the Citrix device. |
280+
281+
282+
> Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself.
283+
</details>
284+
285+
246286
3. **Import the CSV file to create the certificate stores**
247287
248288
```shell

‎integration-manifest.json‎

Lines changed: 31 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -36,17 +36,37 @@
3636
"StoreRequired": false,
3737
"Style": "Default"
3838
},
39-
"Properties": [
40-
{
41-
"Name": "linkToIssuer",
42-
"DisplayName": "Link To Issuer",
43-
"Type": "Bool",
44-
"DependsOn": "",
45-
"DefaultValue": "false",
46-
"Required": false,
47-
"Description": "Determines whether an attempt will be made to link the added certificate (via a Management-Add job) to its issuing CA certificate."
48-
}
49-
],
39+
"Properties": [
40+
{
41+
"Name": "ServerUsername",
42+
"DisplayName": "Server Username",
43+
"Type": "Secret",
44+
"DependsOn": "",
45+
"DefaultValue": "",
46+
"Required": false,
47+
"IsPAMEligible": true,
48+
"Description": "The Citrix username (or valid PAM key if the username is stored in a KF Command configured PAM integration) to be used to log into the Citrix device."
49+
},
50+
{
51+
"Name": "ServerPassword",
52+
"DisplayName": "Server Password",
53+
"Type": "Secret",
54+
"DependsOn": "",
55+
"DefaultValue": "",
56+
"Required": false,
57+
"IsPAMEligible": true,
58+
"Description": "The Citrix password (or valid PAM key if the password is stored in a KF Command configured PAM integration) to be used to log into the Citrix device."
59+
},
60+
{
61+
"Name": "linkToIssuer",
62+
"DisplayName": "Link To Issuer",
63+
"Type": "Bool",
64+
"DependsOn": "",
65+
"DefaultValue": "false",
66+
"Required": false,
67+
"Description": "Determines whether an attempt will be made to link the added certificate (via a Management-Add job) to its issuing CA certificate."
68+
}
69+
],
5070
"EntryParameters": [
5171
{
5272
"Name": "virtualServerName",

0 commit comments

Comments
 (0)