Configuring GCCM discovery

The SCM integration with Google Cloud Certificate Manager (GCCM) enables a seamless and secure solution for certificate discovery.

The GCP integration is only available if enabled for your account. For more information, contact your Sectigo account manager.

The process of configuring GCP and SCM for use with GCCM involves the following:

  1. Verify you have satisfied the prerequisites.

  2. Add a GCP account in SCM.

  3. Configure GCP discovery tasks in SCM.

Prerequisites

In order to configure SCM GCP accounts, the following prerequisites must be met:

  • You must have a GCP account with GCCM configured for a project.

  • You have a GCP service account configured with at least the following permissions:

    • roles/CertificateManager.Viewer

  • You have generated the service account’s credentials in JSON format.

  • You have enabled API access for the Certificate Manager API in the GCP project.

  • Access granted for either of the following Sectigo Certificate Manager public IP ranges:

    • cert-manager.com or hard.cert-manager.com

      • 91.199.212.0/24

      • 91.209.196.0/24

      • 91.212.12.0/24

    • eu.cert-manager.com

      • 35.234.83.163

      • 34.141.32.205

      • 35.241.54.140

      • 34.111.32.130