How to discover PKI certificates

[Nisha30]

Hello ITOM World,

There are couple of threads and document - Certificate management.

Unable to conclude are we able to discover certificates as out of box using Discovery ?? is there an OOB pattern / prove available? 

OR

there has to be custom pattern to be created for this?

Thanks

[Renat Akhmedov]

Hi @Nisha30,

This type of integration should be done via API, not through Discovery or a MID Server. The connection is established using an API key or token defined in the Certificate Authority Account record.

I hope it helps you, and if not, please don't hesitate to ask. 

Best regards,
Renat Akhmedov

[Swapna Abburi]

Hi @Nisha30 

You need to activate "tls_ssl_certs" port probe. After activation, your horizontal discovery should take care of discovering SSL/TLS certificates. Default ports are already added to the probe OOTB. if you need to add any specific ports you can add them as well. Screenshots for reference.

[Nisha30]

Hi @Swapna Abburi  yes i see in my system this is active. 

So where are the certificate discovered stored ? is it  the table -

cmdb_ci_certificate

OR

sn_disco_certmgmt_cmdb_installed_certificate

I can see data in both tables . Which one is relevant to TLS/SSL inventory?

Thanks

[Swapna Abburi]

@Nisha30 

cmdb_ci_certificate - this table is the core table for certificates information.

sn_disco_certmgmt_cmdb_installed_certificate - this table shows the device information where the certificate has been installed. For example: Server and certificate relationship details.

Hope it answers your query.