This document provides information on how to integrate with a DigiCert certificate authority. For more information about the DigiCert certificate authority fields, see Certificate authorities.
Integrate with a DigiCert CA
- On Segura™, in the navigation bar, hover over the Products menu and select Certificate Manager.
- In the side menu, select Management > Authorities > Certificate authorities.
- In the top right corner, click Add, and select DigiCert.
- In the Name * field, enter a name to identify the CA.
- Select the button Status to activate or deactivate the CA.
- In the Use Network Connector? field, select Yes or No. The default is Yes.
- If the value of the Use Network Connector? field is Yes, in the Network Connector field, select the Network Connector to be used. Leave it empty to use the default Network Connector.
- In the User name field, enter the DigiCert user name.
- In the Account ID * field, enter the DigiCert account ID.
- In the API key field, enter the DigiCert API key.
- Click Save.
Network Connector behavior
When Use Network Connector? is set to Yes, the CA uses the selected Network Connector, or the default Network Connector if you left the Network Connector field empty, for all communication with DigiCert: issuing certificates, domain control validation (DCV), revoking certificates, and loading the account's organizations and products.
If the Network Connector agent is unreachable, Segura® never falls back to a direct connection to DigiCert:
- Signing: if the agent is unreachable, or no agent and no default connector are available, the certificate request stays in Waiting signature status with the reason, and Segura® retries it on the next execution.
- Revocation: the revocation ends in error, and Segura® does not retry it.
If DigiCert rejects the credentials or the connection fails, the error message identifies the specific cause, such as the account ID, user name, or API key permissions to check.
When the Network Connector agent is unreachable, the certificate-request screen (New request signature › Additional information) shows an alert banner that explains why, and the Organization, Product, Contact, and Domain validation method fields are disabled. The banner also appears if the tunnel is unavailable, or if DigiCert denies access. The account data loads only when you select the CA, so after the agent reconnects, select the CA again or reopen the form to enable the fields. See How to sign a request for the Additional information tab.