Prerequisites

  • The plugin was tested on HashiCorp Vault versions 1.20.4, 1.2.3, 1.10.0, and 1.11.0

    Vault 1.2.3 has a known issue with reading the VAULT_CLIENT_TIMEOUT environment variable when executed through the Vault CLI tool. This issue was rectified in Vault 1.3.0. For more information, see Dealing with timeouts and error codes.

  • (Optional) jq processor.

  • shasum or equivalent.

  • SCM organization with Web API access enabled for SSL or client certificates.

  • SSL or client types with associated terms for the organization.

  • A Linux client machine. The plugin officially supports the following versions:

    • Ubuntu Server 24.04

    • Ubuntu Server 22.04

    • Ubuntu Server 20.04

    • CentOS 7.3

  • An active SCM account with Admin credentials.

  • REST API access enabled in SCM by your Sectigo account manager.

  • Outbound network access to https://auth.sso.sectigo.com on TCP port 443

  • Outbound network access to the SCM REST API instance on TCP port 443:

    • Main SCM instance — https://enroll.enterprise.sectigo.com

    • Hard instance — https://enroll.hard.sectigo.com

    • EU instance — https://rest.eu.sectigo.com

  • An organization created in SCM.

  • Domains validated in SCM.