Certificate Management | Monofor Help

How Monopam Certificate Manager puts certificates on network appliances, reads what is already on them, and undoes a change. There is one guide per appliance family. Each follows the same order: the steps to deploy a certificate first, then everything else the appliance supports.

Addresses, names and certificates in the screenshots are examples. Each guide describes the current release.

Certificates on F5 BIG-IP

Everything Monopam can do with a BIG-IP: read what is already on it, put a certificate on it, see which virtual servers serve it, split a shared profile without disturbing its neighbours, and undo any of it. All over the iControl REST API. No agent, no SSH, nothing installed on the appliance.

Putting a certificate on the appliance	Everything else
Before you start 1. Get the certificate into Monopam 2. Add the BIG-IP as a deployment target 3. Deploy it 4. When a policy asks for approval 5. Undoing a deployment 6. Renewals	Read what is already on the appliance See which virtual servers serve it One profile, many virtual servers A second certificate When somebody changes it outside Monopam Pushing to every target at once When something goes wrong

Certificates on FortiManager

Everything Monopam can do with a FortiManager: read the certificates already held in its global store, its ADOMs and the FortiGates it manages, import a certificate into an ADOM, repoint an SSL-inspection profile at it, install the change down to a device, and undo any of it. All over the JSON-RPC API. No agent, no SSH, nothing installed on the appliance.

Putting a certificate on the appliance	Everything else
Before you start 1. Get the certificate into Monopam 2. Add FortiManager as a deployment target 3. Deploy it 4. When a policy asks for approval 5. Undoing a deployment 6. Renewals	Read what is already on the appliance One certificate across several appliances When somebody changes it outside Monopam Pushing to every target at once When something goes wrong

Certificates on Citrix NetScaler

Everything Monopam can do with a NetScaler ADC: upload a certificate and key, update the certKey object in place, bind it to an SSL virtual server, list what the appliance already holds, and undo any of it. All over the NITRO REST API. No agent, no SSH, nothing installed on the appliance.

Putting a certificate on the appliance	Everything else
Before you start 1. Get the certificate into Monopam 2. Add the NetScaler as a deployment target 3. Deploy it 4. When a policy asks for approval 5. Undoing a deployment 6. Renewals	Read what is already on the appliance One certificate across several appliances When somebody changes it outside Monopam Pushing to every target at once When something goes wrong

Certificates on Palo Alto Panorama

Everything Monopam can do with a Panorama or a PAN-OS firewall: read the certificate stores it keeps, import a certificate and its key, repoint an SSL/TLS service profile, commit, push the change on to a device group, and undo any of it. All over the XML API. No agent, no SSH, nothing installed on the appliance.

Putting a certificate on the appliance	Everything else
Before you start 1. Get the certificate into Monopam 2. Add Panorama as a deployment target 3. Deploy it 4. When a policy asks for approval 5. Undoing a deployment 6. Renewals	The one thing that trips people up: scope Read what is already on the appliance One certificate across several appliances When somebody changes it outside Monopam Pushing to every target at once When something goes wrong

Certificates on F5 BIG-IP

Certificates on FortiManager

Certificates on Citrix NetScaler

Certificates on Palo Alto Panorama

All pages in this section