mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
71 lines
3.3 KiB
Plaintext
71 lines
3.3 KiB
Plaintext
---
|
|
title: "Azure ADCS Connection"
|
|
description: "Learn how to configure an Azure ADCS Connection for Infisical certificate management."
|
|
---
|
|
|
|
Connect Infisical to Microsoft Active Directory Certificate Services (ADCS) for automated certificate issuance and management.
|
|
|
|
## Prerequisites
|
|
|
|
- Microsoft Active Directory Certificate Services (ADCS) server running and accessible
|
|
- Domain administrator account with certificate management permissions
|
|
- Network connectivity from Infisical to the ADCS server
|
|
- ADCS web enrollment enabled on your server
|
|
|
|
## Connection Setup
|
|
|
|
<Steps>
|
|
<Step title="Navigate to App Connections">
|
|
Navigate to the **App Connections** tab on the **Organization Settings** page.
|
|
|
|
</Step>
|
|
<Step title="Add Connection">
|
|
Select the **Azure ADCS Connection** option from the connection options modal.
|
|
|
|
</Step>
|
|
<Step title="Configure Connection Details">
|
|
**Configuration Tab:**
|
|
- **Name**: Friendly name for this ADCS connection (e.g., "Production ADCS")
|
|
- **ADCS URL**: Your ADCS HTTPS URL (e.g., `https://adcs.yourdomain.com/certsrv`) - only HTTPS is supported
|
|
- **Username**: Domain administrator username (format: `DOMAIN\username` or `username@domain.com`)
|
|
- **Password**: Password for the domain administrator account
|
|
|
|
**SSL Tab:**
|
|
- **SSL Certificate**: Optional PEM certificate for custom CA certificates or self-signed certificates
|
|
- **Reject Unauthorized**: Whether to reject connections with invalid SSL certificates (it's recommended to keep it enabled)
|
|
|
|
<Note>
|
|
**Getting the SSL Certificate**: If your ADCS server uses a self-signed certificate or a certificate from a custom CA, you can obtain the certificate using OpenSSL or PowerShell:
|
|
|
|
**Using OpenSSL:**
|
|
```bash
|
|
openssl s_client -connect your-adcs-server:443 -showcerts
|
|
```
|
|
|
|
**Using PowerShell (from inside your ADCS Server):**
|
|
```powershell
|
|
Import-Module WebAdministration -ErrorAction SilentlyContinue
|
|
$binding = Get-WebBinding -Protocol https -Port 443
|
|
if ($binding -and $binding.certificateHash) {
|
|
$cert = Get-ChildItem -Path "Cert:\LocalMachine\My\$($binding.certificateHash)"
|
|
if ($cert) {
|
|
$certBase64 = [System.Convert]::ToBase64String($cert.RawData)
|
|
$certPem = "-----BEGIN CERTIFICATE-----`n" + ($certBase64 -replace '(.{64})', '$1`n') + "`n-----END CERTIFICATE-----"
|
|
Write-Output $certPem
|
|
}
|
|
}
|
|
```
|
|
|
|
Copy the certificate content (including `-----BEGIN CERTIFICATE-----` and `-----END CERTIFICATE-----` lines) and paste it into the SSL Certificate field.
|
|
</Note>
|
|
|
|
And click **Connect to ADCS** to establish the connection.
|
|
|
|
|
|
</Step>
|
|
<Step title="Connection Created">
|
|
Your **Azure ADCS Connection** is now available for use in your Infisical projects. 
|
|
</Step>
|
|
</Steps>
|
|
|