TrustForce: certificate installation (provisioning) driver support
When referencing the table below, keep the following requirements in mind:
- On Windows platforms where SSH is required for connection, copSSH v1.4.3 or Tectia Server v6 is required.
- On systems where OpenSSH is used, OpenSSH version 4.4 or later is recommended for correct operation. OpenSSH 4.3 is supported (with some restrictions).
- Jump Server support for SSH-based application drivers is included with Trust Protection Platform 6.4 and later and requires OpenSSH v4.4, Tectia 4.4.12, or Tectia 6.0.9.24 on the jump server.
- For updated information related to iControl, see iControl considerations and background.
Common keystores
The following provisioning drivers are supported on the past five versions of Trust Protection Platform, except where noted:
-
Adaptable Application
- Apache/PEM (OpenSSL)
- IBM Global Security Kit (GSK)
- Java Keystore (JKS and JCEKS)
- Microsoft CAPI
- Microsoft IIS
- Network Security Services (Oracle iPlanet)
-
PKCS#12
See About CSR-supported formats for more information.
TIP For a complete list of supported version numbers, see
NOTE For a list of supported keystores to which you can provision using the Server Agent, see Server Agent-supported keystores.
Supported appliances
The following appliance drivers are supported on Trust Protection Platform:
- Amazon Web Services IAM/ELB/CloudFront
- Apache
- Azure Key Vault (Microsoft)
- Blue Coat SSL Visibility Appliance
- CAPI (IIS 7+)
- Citrix NetScaler MPX (with HSM)
- Citrix NetScaler VPX
- F5 Big-IP F5 LTM Advanced
- Google Cloud Load Balancer (external proxies only)
- HashiCorp Vault PKI
- IBM GSK
- IBM Sterling Connect:Direct
- IBM WebSphere DataPower
- Imperva MX (doesn't support file validation)
- iPlanet
- JKS
- Palo Alto Networks Next Generation Firewall
- PEM
- Riverbed SteelHead WAN Optimizer
- Tealeaf PCA (Passive Capture Appliance)
TIP For a complete list of supported version numbers, see
Related Topics