Skip to content

PKI Create Certificate

Go to Automation :materialformkdocs: Go to Automation Hub Docs

View in GitLab

Description

This automation playbook provisions a new certificate using the PKI infrastructure. It collects the required certificate details, submits a certificate signing request (CSR), and retrieves the signed certificate. The playbook can be used to automate certificate creation for servers, services, or applications, ensuring secure communication and compliance with internal security policies.

Credentials

  • sys_srvaapwin_pki

Input

Variable beschrijving Default
target naam van het certificaat ( is meestal de FQDN van de server)
san Comma separated list met SAN namen
template gewenste Certificate template _D09-CA2-SHA256-WebServer
caname naam van de CA server SRVCAISSUE02.gentgrp.gent.be\D09-Issuing-CA2
keystore_encryption Encryptie algoritme voor de PFX AES
installed_on Name of the server where the certificate will be installed
MDAPPGUID GUID of the application in masterdata Application
document_to_pwstate Save the PFX and CER in passwordstate Yes

Output (Ansible facts)

Variable Description
cert_password Password of the created certificate
password_id ID of the certificate in passwordstate
passwordlistid ID of the passwordstate list where the certificate is saved
certificate_details Details of the created certificate

Dependencies