---
title: "How to integrate with a DigiCert CA"
slug: "clm-integrate-digicert-ca"
updated: 2026-11-06T15:14:24Z
published: 2026-11-06T15:14:24Z
canonical: "docs.senhasegura.io/clm-integrate-digicert-ca"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to integrate with a DigiCert CA

This document provides information on how to integrate with a DigiCert certificate authority. For more information about the DigiCert certificate authority fields, see [Certificate authorities](/v4-2/docs/certificate-manager-reference-supported-cas#digicert).

## Integrate with a DigiCert CA

1. On Segura™, in the navigation bar, hover over the **Products menu** and select **Certificate Manager**.
2. In the side menu, select **Management** > **Authorities** > **Certificate authorities**.
3. In the top right corner, click **Add**, and select **DigiCert**.
4. In the **Name *** field, enter a name to identify the CA.
5. Select the button **Status** to activate or deactivate the CA.
6. In the **Use Network Connector?** field, select **Yes** or **No**. The default is **Yes**.
7. If the value of the **Use Network Connector?** field is **Yes**, in the **Network Connector** field, select the Network Connector to be used. Leave it empty to use the default Network Connector.
8. In the **User name** field, enter the DigiCert user name.
9. In the **Account ID *** field, enter the DigiCert account ID.
10. In the **API key** field, enter the DigiCert API key.
11. Click **Save**.

## Network Connector behavior

When **Use Network Connector?** is set to **Yes**, the CA uses the selected Network Connector, or the default Network Connector if you left the **Network Connector** field empty, for all communication with DigiCert: issuing certificates, domain control validation (DCV), revoking certificates, and loading the account's organizations and products.

If the Network Connector agent is unreachable, Segura® never falls back to a direct connection to DigiCert:

- **Signing:** if the agent is unreachable, or no agent and no default connector are available, the certificate request stays in **Waiting signature** status with the reason, and Segura® retries it on the next execution.
- **Revocation:** the revocation ends in error, and Segura® does not retry it.

If DigiCert rejects the credentials or the connection fails, the error message identifies the specific cause, such as the account ID, user name, or API key permissions to check.

When the Network Connector agent is unreachable, the certificate-request screen (**New request signature › Additional information**) shows an alert banner that explains why, and the **Organization**, **Product**, **Contact**, and **Domain validation method** fields are disabled. The banner also appears if the tunnel is unavailable, or if DigiCert denies access. The account data loads only when you select the CA, so after the agent reconnects, select the CA again or reopen the form to enable the fields. See [How to sign a request](/v4-2/docs/certificates-flow-how-to-sign-request) for the **Additional information** tab.