Supported Devices and Platforms

eMudhra CLM supports a wide range of devices and platforms for automated certificate provisioning, ensuring compatibility with modern IT infrastructures. Below is a detailed list of supported categories, devices, and platforms, along with their use cases.

Web Servers

Web servers host websites and require TLS certificates to enable secure HTTPS connections, protecting data in transit.

Device/Platform	Supported	Version	Notes
Apache	Yes	2.2.X, 2.4.X	Supports automated deployment via ACME or custom scripts. Compatible with mod_ssl for TLS configuration.
Nginx	Yes	0.8.X - 1.26.X	Integrates with ACME for automated certificate issuance and renewal. Supports HTTP/2 and modern TLS protocols.
Microsoft IIS	Yes	5.0, 5.1, 6.0, 7.0, 8.0, 8.5, 10.0	Integrates with Windows Certificate Store for seamless certificate management. Supports SCEP and EST protocols.
Jetty	Yes		Java-based server with support for automated certificate deployment via Java KeyStore integration.

Use Case: Automating TLS certificate deployment on Apache or Nginx ensures websites maintain secure connections without manual intervention, ideal for high-traffic environments.

Application Servers

Application servers host business-critical applications, often requiring certificates for secure communication and authentication.

Device/Platform	Supported	Version	Notes
Tomcat	Yes	9.X, 10.X	Supports Java KeyStore for certificate storage and automated updates via eMudhra CLM.
JBoss	Yes		Compatible with automated provisioning using Java KeyStore or PKCS12 files.
WebSphere	Yes		Integrates with IBM’s key management tools for certificate automation.
WebLogic	Yes	12.2.1.X (12c), 14.1.1 (14c)	Supports Oracle’s key management and automated certificate lifecycle management.

Use Case: Application servers hosting internal APIs or customer-facing services benefit from automated certificate renewals to ensure uninterrupted secure communication.

Cloud Services

Cloud platforms require certificates for secure access to resources, APIs, and services.

Device/Platform	Supported	Version	Notes
Azure Key Vault	Yes		Integrates with eMudhra CLM for automated certificate import and renewal in Azure environments.
AWS Key Manager	Yes		Supports automated certificate deployment to AWS resources via AWS SDK or CLI.
AWS Certificate Manager	Yes		Enables seamless integration for managing public and private certificates in AWS.
Imperva WAF (On – Prem)	Yes	X6530, X4530	Certificate deployment for Imperva Hardware-based Web Application Firewalls
Imperva (Cloud WAF)	Yes	Not Applicable	Supports automated certificate updates for Imperva’s cloud security solutions.

Use Case: Cloud services like AWS Certificate Manager automate certificate provisioning for load balancers and APIs, ensuring secure scalability in cloud-native environments.

Load Balancers

Load balancers distribute traffic across servers and require TLS certificates for secure connections.

Device/Platform	Supported	Version	Notes
F5 BIG-IP	Yes	12.X-16.X	Supports automated certificate deployment via iControl REST API or ACME.
HAProxy	Yes		Integrates with ACME for automated certificate management in high-availability setups.

Use Case: Load balancers in enterprise networks use automated certificate provisioning to maintain secure traffic routing without manual updates.

Content Delivery Networks (CDNs)

CDNs deliver content globally and require certificates to ensure data integrity and performance.

Device/Platform	Supported	Version	Notes
Akamai	Yes	Not Applicable	Supports automated certificate deployment via Akamai’s EdgeGrid API or ACME.
Cloudflare	Yes	Not Applicable	Integrates with Cloudflare’s API v4 for automated SSL/TLS certificate issuance and rotation. Supports both Universal SSL and custom certificate uploads for zones. Automates provisioning to Cloudflare Edge network via ACME or API-based workflows.

Use Case: CDNs like Akamai or Cloudflare use automated certificate provisioning to secure content delivery across global edge servers, ensuring low latency and high security.

File System

The file system scan allows CERTInext to discover certificates stored directly on the host machine's local storage, including custom directories, application folders, and OS-level certificate paths.

Device/Platform	Supported	Version	Notes
File System	Yes		Scans local directories and file paths for certificates in PEM, DER, PFX/PKCS12, and JKS formats. Supports agent-based discovery across Windows and Linux environments.

Use Case: Enterprises with certificates stored across application directories or custom paths benefit from file system scanning to ensure full certificate visibility and prevent undetected expirations.

Remote Access / Protocols

Remote access services and protocols often rely on certificates for encrypted communication and host authentication. CERTInext supports discovery and lifecycle management for these services.

Device/Platform	Supported	Version	Notes
Remote File System	Yes	Not Applicable	Enables agent-less discovery of certificates on remote file shares and network-attached storage via standard file protocols (SMB/NFS).
SSH (Secure Shell)	Yes	10.3 / 10.3p1 (April 2026)	Discovers SSH host keys and associated certificates on remote servers. Supports OpenSSH-based environments for automated key and certificate management.
Remote Desktop (RDP)	Yes	Windows Server 2016, 2019, 2022, 2025	Identifies TLS certificates used by Remote Desktop Protocol services on Windows hosts, enabling automated renewal and deployment for secure remote sessions.

Use Case: Organizations with large fleets of remote servers or virtual desktops can automate certificate discovery across SSH and RDP services, eliminating manual tracking and reducing the risk of expired certificates disrupting remote access.

Security / Network Devices

Network security appliances require certificates for SSL/TLS inspection, admin console access, and VPN authentication. CERTInext supports automated certificate management for leading security platforms.

Device/Platform	Supported	Version	Notes
Fortigate	Yes	8.0 (April 2026) - also 7.6.x	Supports automated certificate deployment to Fortinet FortiGate firewalls via REST API. Compatible with SSL/TLS inspection and VPN certificate management.
Palo Alto Networks	Yes	12.1.7-h1	Integrates with Palo Alto Networks firewalls and Panorama for automated certificate provisioning, supporting SSL forward proxy and admin certificate use cases.
iboss	Yes		Enables automated certificate management for iboss cloud security platform, supporting SSL/TLS inspection policies and gateway certificate deployments.

Use Case: Security teams managing next-generation firewalls and cloud-delivered security platforms can automate certificate lifecycles on Fortigate, Palo Alto, and iboss devices, ensuring uninterrupted SSL inspection and eliminating certificate-related outages.

Orchestration Platforms

Container orchestration platforms manage workloads at scale and require certificates for service-to-service communication, ingress controllers, and internal PKI.

Device/Platform	Supported	Version	Notes
Kubernetes	Yes	1.33.x – 1.36.x	Integrates with Kubernetes clusters for automated TLS certificate provisioning to ingress controllers, services, and pods. Supports cert-manager integration and Kubernetes Secrets for certificate storage.

Use Case: DevOps teams running microservices on Kubernetes benefit from automated certificate issuance and renewal for ingress controllers and internal service mesh communication, reducing operational overhead in dynamic containerized environments.

Databases

Databases hosting applications or acting as backend services may store or expose certificates used for encrypted connections and mutual TLS authentication.

Device/Platform	Supported	Version	Notes
Database	Yes		Supports discovery of TLS certificates configured on database servers (e.g., MySQL, PostgreSQL, MSSQL, Oracle) for encrypted client-server communication. Enables automated renewal and deployment of database server certificates.

Use Case: Enterprises enforcing encryption-in-transit policies for database connections can automate the discovery and renewal of database TLS certificates, ensuring compliance and preventing connection failures due to expired certificates.

Source Repositories

Source repositories may contain certificates, private keys, and configuration files that require discovery and governance to prevent accidental exposure or expiration.

Repository	Supported	Version	Notes
Git Repository	Yes		Scans Git-based repositories (e.g., GitHub, GitLab, Bitbucket) for certificates and private key material embedded in codebases or configuration files. Helps enforce secrets hygiene and certificate governance across development pipelines.

Use Case: Security and DevOps teams can use CERTInext to detect certificates and key material inadvertently committed to source repositories, enabling timely remediation and preventing key compromise in CI/CD pipelines.

Hardware Security Modules (HSMs)

HSMs securely manage and store cryptographic keys and certificates.

Device/Platform	Supported	Version	Notes
All HSMs	Yes		Compatible with major HSM vendors (e.g., Thales, Entrust, Utimaco) via PKCS11 or proprietary APIs.

Use Case: HSMs in financial or healthcare environments benefit from automated certificate provisioning to securely manage keys for compliance with regulations like PCI-DSS or HIPAA.

Repositories

Repositories store and manage digital certificates and keys centrally.

Repository	Supported	Version	Notes
Active Directory	Yes	Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 Windows Server 2022	Integrates with eMudhra CLM for automated certificate enrollment and management in Windows environments.
OpenLDAP	Yes		Supports automated certificate storage and retrieval in open-source LDAP deployments.

Use Case: Centralized repositories like Active Directory streamline certificate management for large-scale enterprise networks.

Certificate Stores

Certificate stores securely manage certificates within operating systems or applications.

Certificate Store	Supported	Version	Notes
Windows Certificate Store	Yes		Supports automated certificate import and renewal via SCEP, EST, or CMP protocols.

Use Case: Windows Certificate Store automation ensures seamless certificate updates for Windows-based applications and services.

Supported Automated Certificate Management Protocols

eMudhra CLM leverages industry-standard protocols to automate certificate enrollment, issuance, and renewal. Each protocol is designed to address specific use cases and security requirements.

Protocol	Supported	Version	Description
SCEP (Simple Certificate Enrollment Protocol)	Yes		Simplifies certificate enrollment for devices and applications, ideal for mobile and IoT environments.
CMP (Certificate Management Protocol)	Yes		Provides a comprehensive framework for managing the entire certificate lifecycle, including issuance, renewal, and revocation.
EST (Enrollment over Secure Transport)	Yes		Enhances security for certificate enrollment using HTTPS, suitable for modern web-based environments.
ACME (Automatic Certificate Management Environment)	Yes		Automates issuance and renewal of SSL/TLS certificates, widely used for web servers and cloud services.
WAEP (Windows Auto-Enrollment Proxy)	Yes		Enables automatic certificate enrollment and renewal for domain-joined Windows devices via Microsoft's Certificate Enrollment Policy (CEP) and Certificate Enrollment Web Service (CES).

Use Case: ACME is commonly used with Let’s Encrypt or eMudhra’s CA to automate certificate renewals for public-facing websites, while CMP is ideal for complex enterprise PKI environments.