CSC

Information required to configure the integration

To configure the integration you need:

• an API key and bearer token from your CSC account.
  • Please login into the CSCDomainManager part of your CSC Account.
  • Go to API Administration.
  • Show, then copy, the API key.
  • Click 'Create token' against the user that you would like the token to be assigned to, then copy that. We recommend that a seperate API User account is set up for this purpose.
• a unique reference to identify the CSC account such as the account user name. This is important as there may be more than one CSC account added to your organization. We recommend you use your CSC account number, which is displayed at the top-right hand side when you are logged into the CSC Domain Manager.

Configuring the integration in Certificates

Once you have all of the information required, you can configure the integration in Certificates. Go to Integrations. Then:

• Click 'Add New Integration' and select CSC.
• Then enter:
  • 'Name' - a mandatory field. The name you would like to use for this integration. Use something that will make sense to you and your team.
  • 'CSC Customer ID' - a mandatory field. This should something unique to your organizations CSC account. We recommend your CSC account number.
  • 'Tags' - this is optional. When this feature is used, then Certificates will tag any resources that we discover when running the integration.
  • 'API KEY' - a mandatory field. This is the API key created in the previous step.
  • 'BEARER TOKEN' - a mandatory field. This is the bearer token created in the previous step.
  • Click "Save Integration".
    • Once saved, click "Test" in the integration's actions in the table. If it succeeds, then ensure the integration is enabled and enable it otherwise using the row actions. Your new integration is now active and will run shortly.
  • If we have been unable to connect, then the error 'Invalid credentials' will be shown at the top right-hand side of the page.

Adding discovered domains to your Certificates inventory

Rather than immediately adding domains from integrations to your Certificates inventory, we give you the opportunity to review them first. This means you can check that they should be added to your Certificates inventory, and if so whether the domain should be monitored or not.

• The domains that have been discovered in your CSC account can be reviewed in Discovered Hosts. They will be labeled in 'Match Reason' as 'Integration - Name', with the name being what you called the integration when you added it.
• If you would like to add a domain to the Certificates inventory, then select it, click 'Update n hosts', then mark them as 'Own'. This tells Certificates that you own those domains. They will be added to your inventory, and monitoring will begin immediately.
• If you would prefer to delete a discovered domain, then pick 'Delete' instead of 'Own'.

Common issues

If the integration fails then check that the:

• API key has been correctly copied.
• the bearer token has been correctly copied.
• that the user has permissions for the API in CSC. CSC will let you create a bearer token for a user, even if they do not have API permissions, although it will display a warning when you create the bearer token.