> For the complete documentation index, see [llms.txt](https://docs.certinext.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.certinext.io/documentation/automation-and-devops/supported-devices-and-platforms.md). # Supported Devices and Platforms eMudhra CLM supports a wide range of devices and platforms for automated certificate provisioning, ensuring compatibility with modern IT infrastructures. Below is a detailed list of supported categories, devices, and platforms, along with their use cases. ### **Web Servers** Web servers host websites and require TLS certificates to enable secure HTTPS connections, protecting data in transit.
Device/PlatformSupportedVersionNotes
ApacheYes2.2.X, 2.4.XSupports automated deployment via ACME or custom scripts. Compatible with mod_ssl for TLS configuration.
NginxYes0.8.X - 1.26.XIntegrates with ACME for automated certificate issuance and renewal. Supports HTTP/2 and modern TLS protocols.
Microsoft IISYes5.0, 5.1, 6.0, 7.0, 8.0, 8.5, 10.0Integrates with Windows Certificate Store for seamless certificate management. Supports SCEP and EST protocols.
JettyYes Java-based server with support for automated certificate deployment via Java KeyStore integration.
**Use Case:** Automating TLS certificate deployment on Apache or Nginx ensures websites maintain secure connections without manual intervention, ideal for high-traffic environments. ### Application Servers Application servers host business-critical applications, often requiring certificates for secure communication and authentication.
Device/PlatformSupportedVersionNotes
TomcatYes9.X, 10.XSupports Java KeyStore for certificate storage and automated updates via eMudhra CLM.
JBossYes Compatible with automated provisioning using Java KeyStore or PKCS12 files.
WebSphereYesIntegrates with IBM’s key management tools for certificate automation.
WebLogicYes12.2.1.X (12c), 14.1.1 (14c)Supports Oracle’s key management and automated certificate lifecycle management.
**Use Case:** Application servers hosting internal APIs or customer-facing services benefit from automated certificate renewals to ensure uninterrupted secure communication. ### Cloud Services Cloud platforms require certificates for secure access to resources, APIs, and services.
Device/PlatformSupportedVersionNotes
Azure Key VaultYes Integrates with eMudhra CLM for automated certificate import and renewal in Azure environments.
AWS Key ManagerYes Supports automated certificate deployment to AWS resources via AWS SDK or CLI.
AWS Certificate ManagerYes Enables seamless integration for managing public and private certificates in AWS.
Imperva WAF (On – Prem)YesX6530, X4530Certificate deployment for Imperva Hardware-based Web Application Firewalls
Imperva (Cloud WAF)YesNot ApplicableSupports automated certificate updates for Imperva’s cloud security solutions.
**Use Case:** Cloud services like AWS Certificate Manager automate certificate provisioning for load balancers and APIs, ensuring secure scalability in cloud-native environments. ### Load Balancers Load balancers distribute traffic across servers and require TLS certificates for secure connections.
Device/PlatformSupportedVersionNotes
F5 BIG-IPYes12.X-16.XSupports automated certificate deployment via iControl REST API or ACME.
HAProxyYes Integrates with ACME for automated certificate management in high-availability setups.
**Use Case:** Load balancers in enterprise networks use automated certificate provisioning to maintain secure traffic routing without manual updates. ### Content Delivery Networks (CDNs) CDNs deliver content globally and require certificates to ensure data integrity and performance.
Device/PlatformSupportedVersionNotes
AkamaiYesNot ApplicableSupports automated certificate deployment via Akamai’s EdgeGrid API or ACME.
CloudflareYesNot ApplicableIntegrates with Cloudflare’s API v4 for automated SSL/TLS certificate issuance and rotation. Supports both Universal SSL and custom certificate uploads for zones. Automates provisioning to Cloudflare Edge network via ACME or API-based workflows.
**Use Case:** CDNs like Akamai or Cloudflare use automated certificate provisioning to secure content delivery across global edge servers, ensuring low latency and high security. ### **File System** The file system scan allows CERTInext to discover certificates stored directly on the host machine's local storage, including custom directories, application folders, and OS-level certificate paths. | **Device/Platform** | **Supported** | **Version** | **Notes** | | ------------------- | ------------- | ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **File System** | Yes | | Scans local directories and file paths for certificates in PEM, DER, PFX/PKCS12, and JKS formats. Supports agent-based discovery across Windows and Linux environments. | **Use Case:** Enterprises with certificates stored across application directories or custom paths benefit from file system scanning to ensure full certificate visibility and prevent undetected expirations. ### **Remote Access / Protocols** Remote access services and protocols often rely on certificates for encrypted communication and host authentication. CERTInext supports discovery and lifecycle management for these services. | **Device/Platform** | **Supported** | **Version** | **Notes** | | ------------------------ | ------------- | ------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Remote File System** | Yes | Not Applicable | Enables agent-less discovery of certificates on remote file shares and network-attached storage via standard file protocols (SMB/NFS). | | **SSH (Secure Shell)** | Yes | 10.3 / 10.3p1 (April 2026) | Discovers SSH host keys and associated certificates on remote servers. Supports OpenSSH-based environments for automated key and certificate management. | | **Remote Desktop (RDP)** | Yes | Windows Server 2016, 2019, 2022, 2025 | Identifies TLS certificates used by Remote Desktop Protocol services on Windows hosts, enabling automated renewal and deployment for secure remote sessions. | **Use Case:** Organizations with large fleets of remote servers or virtual desktops can automate certificate discovery across SSH and RDP services, eliminating manual tracking and reducing the risk of expired certificates disrupting remote access. ### **Security / Network Devices** Network security appliances require certificates for SSL/TLS inspection, admin console access, and VPN authentication. CERTInext supports automated certificate management for leading security platforms. | **Device/Platform** | **Supported** | **Version** | **Notes** | | ---------------------- | ------------- | ----------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Fortigate** | Yes | 8.0 (April 2026) - also 7.6.x | Supports automated certificate deployment to Fortinet FortiGate firewalls via REST API. Compatible with SSL/TLS inspection and VPN certificate management. | | **Palo Alto Networks** | Yes | 12.1.7-h1 | Integrates with Palo Alto Networks firewalls and Panorama for automated certificate provisioning, supporting SSL forward proxy and admin certificate use cases. | | **iboss** | Yes | | Enables automated certificate management for iboss cloud security platform, supporting SSL/TLS inspection policies and gateway certificate deployments. | **Use Case:** Security teams managing next-generation firewalls and cloud-delivered security platforms can automate certificate lifecycles on Fortigate, Palo Alto, and iboss devices, ensuring uninterrupted SSL inspection and eliminating certificate-related outages. ### **Orchestration Platforms** Container orchestration platforms manage workloads at scale and require certificates for service-to-service communication, ingress controllers, and internal PKI. | **Device/Platform** | **Supported** | **Version** | **Notes** | | ------------------- | ------------- | --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Kubernetes** | Yes | 1.33.x – 1.36.x | Integrates with Kubernetes clusters for automated TLS certificate provisioning to ingress controllers, services, and pods. Supports cert-manager integration and Kubernetes Secrets for certificate storage. | **Use Case:** DevOps teams running microservices on Kubernetes benefit from automated certificate issuance and renewal for ingress controllers and internal service mesh communication, reducing operational overhead in dynamic containerized environments. ### **Databases** Databases hosting applications or acting as backend services may store or expose certificates used for encrypted connections and mutual TLS authentication. | **Device/Platform** | **Supported** | **Version** | **Notes** | | ------------------- | ------------- | ----------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Database** | Yes | | Supports discovery of TLS certificates configured on database servers (e.g., MySQL, PostgreSQL, MSSQL, Oracle) for encrypted client-server communication. Enables automated renewal and deployment of database server certificates. | **Use Case:** Enterprises enforcing encryption-in-transit policies for database connections can automate the discovery and renewal of database TLS certificates, ensuring compliance and preventing connection failures due to expired certificates. ### **Source Repositories** Source repositories may contain certificates, private keys, and configuration files that require discovery and governance to prevent accidental exposure or expiration. | **Repository** | **Supported** | **Version** | **Notes** | | ------------------ | ------------- | ----------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Git Repository** | Yes | | Scans Git-based repositories (e.g., GitHub, GitLab, Bitbucket) for certificates and private key material embedded in codebases or configuration files. Helps enforce secrets hygiene and certificate governance across development pipelines. | **Use Case:** Security and DevOps teams can use CERTInext to detect certificates and key material inadvertently committed to source repositories, enabling timely remediation and preventing key compromise in CI/CD pipelines. ### Hardware Security Modules (HSMs) HSMs securely manage and store cryptographic keys and certificates.
Device/PlatformSupportedVersionNotes
All HSMsYes Compatible with major HSM vendors (e.g., Thales, Entrust, Utimaco) via PKCS11 or proprietary APIs.
**Use Case:** HSMs in financial or healthcare environments benefit from automated certificate provisioning to securely manage keys for compliance with regulations like PCI-DSS or HIPAA. ### Repositories Repositories store and manage digital certificates and keys centrally.
RepositorySupportedVersionNotes
Active DirectoryYes

Windows Server 2012 R2

Windows Server 2016

Windows Server 2019

Windows Server 2022

Integrates with eMudhra CLM for automated certificate enrollment and management in Windows environments.
OpenLDAPYes Supports automated certificate storage and retrieval in open-source LDAP deployments.
**Use Case:** Centralized repositories like Active Directory streamline certificate management for large-scale enterprise networks. ### Certificate Stores Certificate stores securely manage certificates within operating systems or applications.
Certificate StoreSupportedVersionNotes
Windows Certificate StoreYes Supports automated certificate import and renewal via SCEP, EST, or CMP protocols.
**Use Case:** Windows Certificate Store automation ensures seamless certificate updates for Windows-based applications and services. ### Supported Automated Certificate Management Protocols eMudhra CLM leverages industry-standard protocols to automate certificate enrollment, issuance, and renewal. Each protocol is designed to address specific use cases and security requirements.
ProtocolSupportedVersionDescription
SCEP (Simple Certificate Enrollment Protocol)Yes Simplifies certificate enrollment for devices and applications, ideal for mobile and IoT environments.
CMP (Certificate Management Protocol)Yes Provides a comprehensive framework for managing the entire certificate lifecycle, including issuance, renewal, and revocation.
EST (Enrollment over Secure Transport)Yes Enhances security for certificate enrollment using HTTPS, suitable for modern web-based environments.
ACME (Automatic Certificate Management Environment)Yes Automates issuance and renewal of SSL/TLS certificates, widely used for web servers and cloud services.
WAEP (Windows Auto-Enrollment Proxy)YesEnables automatic certificate enrollment and renewal for domain-joined Windows devices via Microsoft's Certificate Enrollment Policy (CEP) and Certificate Enrollment Web Service (CES).
**Use Case:** ACME is commonly used with Let’s Encrypt or eMudhra’s CA to automate certificate renewals for public-facing websites, while CMP is ideal for complex enterprise PKI environments. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.certinext.io/documentation/automation-and-devops/supported-devices-and-platforms.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.