From 9a9b0aa174742606197f90fa918964c54a053c62 Mon Sep 17 00:00:00 2001 From: Hayden Roszell Date: Wed, 3 Jul 2024 20:05:57 +0100 Subject: [PATCH] chore(docs): Translate doc structure for compatibility with doctool and upgrade bootstrap workflow --- .../workflows/keyfactor-release-workflow.yml | 20 ++ .../workflows/keyfactor-starter-workflow.yml | 42 ---- README.md | 199 ++++++------------ docs/fortigate.md | 120 +++++++++++ docsource/fortigate.md | 18 ++ docsource/overview.md | 6 + integration-manifest.json | 116 +++++----- 7 files changed, 293 insertions(+), 228 deletions(-) create mode 100644 .github/workflows/keyfactor-release-workflow.yml delete mode 100644 .github/workflows/keyfactor-starter-workflow.yml create mode 100644 docs/fortigate.md create mode 100644 docsource/fortigate.md create mode 100644 docsource/overview.md diff --git a/.github/workflows/keyfactor-release-workflow.yml b/.github/workflows/keyfactor-release-workflow.yml new file mode 100644 index 0000000..3071ff4 --- /dev/null +++ b/.github/workflows/keyfactor-release-workflow.yml @@ -0,0 +1,20 @@ +name: Keyfactor Release Workflow + +on: + workflow_dispatch: + pull_request: + types: [opened, closed, synchronize, edited, reopened] + push: + create: + branches: + - 'release-*.*' + +jobs: + call-starter-workflow: + uses: keyfactor/actions/.github/workflows/starter.yml@v3 + secrets: + token: ${{ secrets.V2BUILDTOKEN}} + APPROVE_README_PUSH: ${{ secrets.APPROVE_README_PUSH}} + gpg_key: ${{ secrets.KF_GPG_PRIVATE_KEY }} + gpg_pass: ${{ secrets.KF_GPG_PASSPHRASE }} + \ No newline at end of file diff --git a/.github/workflows/keyfactor-starter-workflow.yml b/.github/workflows/keyfactor-starter-workflow.yml deleted file mode 100644 index 6e26a91..0000000 --- a/.github/workflows/keyfactor-starter-workflow.yml +++ /dev/null @@ -1,42 +0,0 @@ -name: Starter Workflow -on: [workflow_dispatch, push, pull_request] - -jobs: - call-create-github-release-workflow: - uses: Keyfactor/actions/.github/workflows/github-release.yml@main - - get-manifest-properties: - runs-on: windows-latest - outputs: - update_catalog: ${{ steps.read-json.outputs.prop }} - steps: - - uses: actions/checkout@v3 - - name: Read json - id: read-json - shell: pwsh - run: | - $json = Get-Content integration-manifest.json | ConvertFrom-Json - echo "::set-output name=prop::$(echo $json.update_catalog)" - - call-dotnet-build-and-release-workflow: - needs: [call-create-github-release-workflow] - uses: Keyfactor/actions/.github/workflows/dotnet-build-and-release.yml@main - with: - release_version: ${{ needs.call-create-github-release-workflow.outputs.release_version }} - release_url: ${{ needs.call-create-github-release-workflow.outputs.release_url }} - release_dir: Fortigate/bin/Release - secrets: - token: ${{ secrets.PRIVATE_PACKAGE_ACCESS }} - - call-generate-readme-workflow: - if: github.event_name == 'push' || github.event_name == 'workflow_dispatch' - uses: Keyfactor/actions/.github/workflows/generate-readme.yml@main - secrets: - token: ${{ secrets.APPROVE_README_PUSH }} - - call-update-catalog-workflow: - needs: get-manifest-properties - if: needs.get-manifest-properties.outputs.update_catalog == 'True' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch') - uses: Keyfactor/actions/.github/workflows/update-catalog.yml@main - secrets: - token: ${{ secrets.SDK_SYNC_PAT }} diff --git a/README.md b/README.md index 1f824ba..925b718 100644 --- a/README.md +++ b/README.md @@ -1,165 +1,106 @@ -# Fortigate +

+ Fortigate Universal Orchestrator Extension +

-This integration is used to inventory and manage certificates in Fortigate. +

+ +Integration Status: production +Release +Issues +GitHub Downloads (all assets, all releases) +

-#### Integration status: Production - Ready for use in production environments. +

+ + + Support + + · + + Installation + + · + + License + + · + + Related Integrations + +

-## About the Keyfactor Universal Orchestrator Extension -This repository contains a Universal Orchestrator Extension which is a plugin to the Keyfactor Universal Orchestrator. Within the Keyfactor Platform, Orchestrators are used to manage “certificate stores” — collections of certificates and roots of trust that are found within and used by various applications. +## Overview -The Universal Orchestrator is part of the Keyfactor software distribution and is available via the Keyfactor customer portal. For general instructions on installing Extensions, see the “Keyfactor Command Orchestrator Installation and Configuration Guide” section of the Keyfactor documentation. For configuration details of this specific Extension see below in this readme. +The Fortigate Universal Orchestrator extension enables remote management of cryptographic certificates on Fortigate devices via Keyfactor Command. Fortigate devices use certificates to secure communications, authenticate users, and enforce security policies across networks. -The Universal Orchestrator is the successor to the Windows Orchestrator. This Orchestrator Extension plugin only works with the Universal Orchestrator and does not work with the Windows Orchestrator. +In the context of this extension, defined Certificate Stores represent specific locations on the Fortigate device where certificates are stored and managed. These locations can include local user certificates, factory certificates, and other defined repositories. The Universal Orchestrator extension facilitates inventory, addition, renewal, and removal of certificates within these stores, streamlining the certificate management process for IT administrators. +## Compatibility +This integration is compatible with Keyfactor Universal Orchestrator version 10.1 and later. -## Support for Fortigate +## Support +The Fortigate Universal Orchestrator extension is supported by Keyfactor for Keyfactor customers. If you have a support issue, please open a support ticket with your Keyfactor representative. If you have a support issue, please open a support ticket via the Keyfactor Support Portal at https://support.keyfactor.com. + +> To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab. -Fortigate is open source and community supported, meaning that there is **no SLA** applicable for these tools. +## Installation +Before installing the Fortigate Universal Orchestrator extension, it's recommended to install [kfutil](https://github.com/Keyfactor/kfutil). Kfutil is a command-line tool that simplifies the process of creating store types, installing extensions, and instantiating certificate stores in Keyfactor Command. -###### To report a problem or suggest a new feature, use the **[Issues](../../issues)** tab. If you want to contribute actual bug fixes or proposed enhancements, use the **[Pull requests](../../pulls)** tab. +1. Follow the [requirements section](docs/fortigate.md#requirements) to configure a Service Account and grant necessary API permissions. +
Requirements ---- + ### Fortigate Setup + The Fortigate Orchestrator Extension requires an API token be created in the Fortigate environment being managed. Please review the following [instructions](https://docs.fortinet.com/document/forticonverter/7.0.1/online-help/866905/connect-fortigate-device-via-api-token) for creating an API token to be used in this integration. + ### Fortigate Version Supported + The Fortigate Orchestrator Extension was tested using Fortigate, version 7.2.4 -## Keyfactor Version Supported -The minimum version of the Keyfactor Universal Orchestrator Framework needed to run this version of the extension is 10.1 -## Platform Specific Notes +
-The Keyfactor Universal Orchestrator may be installed on either Windows or Linux based platforms. The certificate operations supported by a capability may vary based what platform the capability is installed on. The table below indicates what capabilities are supported based on which platform the encompassing Universal Orchestrator is running. -| Operation | Win | Linux | -|-----|-----|------| -|Supports Management Add|✓ |✓ | -|Supports Management Remove|✓ |✓ | -|Supports Create Store| | | -|Supports Discovery| | | -|Supports Renrollment| | | -|Supports Inventory|✓ |✓ | +2. Create Certificate Store Types for the Fortigate Orchestrator extension. + * **Using kfutil**: -## PAM Integration + ```shell + # Fortigate + kfutil store-types create Fortigate + ``` -This orchestrator extension has the ability to connect to a variety of supported PAM providers to allow for the retrieval of various client hosted secrets right from the orchestrator server itself. This eliminates the need to set up the PAM integration on Keyfactor Command which may be in an environment that the client does not want to have access to their PAM provider. + * **Manually**: + * [Fortigate](docs/fortigate.md#certificate-store-type-configuration) -The secrets that this orchestrator extension supports for use with a PAM Provider are: +3. Install the Fortigate Universal Orchestrator extension. + + * **Using kfutil**: On the server that that hosts the Universal Orchestrator, run the following command: -|Name|Description| -|----|-----------| -|StorePassword|The Fortigate API Access Token used to execute Fortigate API requests| - + ```shell + # Windows Server + kfutil orchestrator extension -e fortigate-orchestrator@latest --out "C:\Program Files\Keyfactor\Keyfactor Orchestrator\extensions" -It is not necessary to use a PAM Provider for all of the secrets available above. If a PAM Provider should not be used, simply enter in the actual value to be used, as normal. + # Linux + kfutil orchestrator extension -e fortigate-orchestrator@latest --out "/opt/keyfactor/orchestrator/extensions" + ``` -If a PAM Provider will be used for one of the fields above, start by referencing the [Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam). The GitHub repo for the PAM Provider to be used contains important information such as the format of the `json` needed. What follows is an example but does not reflect the `json` values for all PAM Providers as they have different "instance" and "initialization" parameter names and values. + * **Manually**: Follow the [official Command documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/CustomExtensions.htm?Highlight=extensions) to install the latest [Fortigate Universal Orchestrator extension](https://github.com/Keyfactor/fortigate-orchestrator/releases/latest). -### Example PAM Provider Setup +4. Create new certificate stores in Keyfactor Command for the Sample Universal Orchestrator extension. -To use a PAM Provider to resolve a field, in this example the __Server Password__ will be resolved by the `Hashicorp-Vault` provider, first install the PAM Provider extension from the [Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) on the Universal Orchestrator. + * [Fortigate](docs/fortigate.md#certificate-store-configuration) -Next, complete configuration of the PAM Provider on the UO by editing the `manifest.json` of the __PAM Provider__ (e.g. located at extensions/Hashicorp-Vault/manifest.json). The "initialization" parameters need to be entered here: -~~~ json - "Keyfactor:PAMProviders:Hashicorp-Vault:InitializationInfo": { - "Host": "http://127.0.0.1:8200", - "Path": "v1/secret/data", - "Token": "xxxxxx" - } -~~~ -After these values are entered, the Orchestrator needs to be restarted to pick up the configuration. Now the PAM Provider can be used on other Orchestrator Extensions. +## License -### Use the PAM Provider -With the PAM Provider configured as an extenion on the UO, a `json` object can be passed instead of an actual value to resolve the field with a PAM Provider. Consult the [Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) for the specific format of the `json` object. +Apache License 2.0, see [LICENSE](LICENSE). -To have the __Server Password__ field resolved by the `Hashicorp-Vault` provider, the corresponding `json` object from the `Hashicorp-Vault` extension needs to be copied and filed in with the correct information: - -~~~ json -{"Secret":"my-kv-secret","Key":"myServerPassword"} -~~~ - -This text would be entered in as the value for the __Server Password__, instead of entering in the actual password. The Orchestrator will attempt to use the PAM Provider to retrieve the __Server Password__. If PAM should not be used, just directly enter in the value for the field. - - - - - ---- - - -## Use Cases Supported and Limitations - -The Fortigate Orchestrator Extension supports the following use cases: -1. Inventory of local user and factory cerificates -2. Ability to add new local certificates -3. Ability to renew **unbound** local user certificates -4. Ability to delete **unbound** local user certificates - -The Fortigate Orchestrator Extension DOES NOT support the following use cases: -1. The renewal or removal of certificates enrolled through the internal Fortigate CA -2. The renewal or removal of factory certificates -3. The renewal or removal of ANY certificate bound to a Fortigate object -4. Certificate enrollment using the internal Fortigate CA (Keyfactor's "reenrollment" or "on device key generation" use case) - -## Fortigate Version Supported - -The Fortigate Orchestrator Extension was tested using Fortigate, version 7.2.4 - -## Fortigate Orchestrator Extension Versioning - -The version number of a the Fortigate Orchestrator Extension can be verified by right clicking on the Fortigate.dll file in the Extensions/Fortigate installation folder, selecting Properties, and then clicking on the Details tab. - -## Fortigate Orchestrator Extension Installation - -1. Create the Fortigate certificate store type. This can be done either: a) using the Keyfactor Command UI to manually set up the certificate store type (please refer to the Keyfactor Command Reference Guide for more information on how to do this), or b) by using the Keyfactor Command API to automate the creation of the store type. Please see the provided CURL script [here](Certificate%20Store%20Type%20CURL%20Script/Fortigate.curl). A detailed description of how the Fortigate certificate store type should be configured can be found in the Fortigate Certificate Store Type section below. -2. Stop the Keyfactor Orchestrator Service on the server hosting the Keyfactor Orchestrator. -3. In the Keyfactor Orchestrator installation folder (by convention usually C:\Program Files\Keyfactor\Keyfactor Orchestrator), find the "extensions" folder. Underneath that, create a new folder. The name doesn't matter, but something descriptive like "Fortigate" would probably be best. -4. Download the latest version of the Fortigate Orchestrator from [GitHub](https://github.com/Keyfactor/fortigate-orchestrator). -5. Copy the contents of the download installation zip file to the folder created in step 1. -6. Start the Keyfactor Orchestrator Service on the server hosting the Keyfactor Orchestrator. - -## Fortigate Setup - -The Fortigate Orchestrator Extension requires an API token be created in the Fortigate environment being managed. Please review the following [instructions](https://docs.fortinet.com/document/forticonverter/7.0.1/online-help/866905/connect-fortigate-device-via-api-token) for creating an API token to be used in this integration. - -## Certificate Store Type Settings - -Below are the values you need to enter if you choose to manually create the Fortigate certificate store type in the Keyfactor Command UI (related to Step 1 of Fortigate Orchestrator Extension Installation above). - -*Basic Tab:* -- **Name** – Required. The display name you wish to use for the new certificate store type. Suggested value - Fortigate -- **ShortName** - Required. Suggested value - Fortigate. If you choose to use a different value, you will need to modify the manifest.json file accordingly. -- **Custom Capability** - Unchecked -- **Supported Job Types** - Inventory, Add, and Remove should all be checked. -- **Needs Server** - Unchecked -- **Blueprint Allowed** - Checked if you wish to make use of blueprinting. Please refer to the Keyfactor Command Reference Guide for more details on this feature. -- **Uses PoserShell** - Unchecked -- **Requires Store Password** - Checked. -- **Supports Entry Password** - Unchecked. - -*Advanced Tab:* -- **Store Path Type** - Freeform -- **Supports Custom Alias** - Required -- **Private Key Handling** - Required -- **PFX Password Style** - Default - -*Custom Fields Tab:* -None - -*Entry Parameters:* -None - -## Certificate Store Setup - -Please refer to the Keyfactor Command Reference Guide for information on creating certificate stores in Keyfactor Command. However, there are a few fields that are important to highlight here: -- Category - Select "Fortigate" or whatever ShortName you chose for the store type. -- Client Machine - The IP address or DNS for your Fortigate server. -- Store Path - This is not used in this integration, but is a required field in the UI. Just enter any value here. -- Password - Click the button here and enter the Fortigate API Token you previously set up (See Fortigate Setup earlier in this README). +## Related Integrations +See all [Keyfactor Universal Orchestrator extensions](https://github.com/orgs/Keyfactor/repositories?q=orchestrator). \ No newline at end of file diff --git a/docs/fortigate.md b/docs/fortigate.md new file mode 100644 index 0000000..8c291f8 --- /dev/null +++ b/docs/fortigate.md @@ -0,0 +1,120 @@ +## Fortigate + +The Fortigate Certificate Store Type in the Keyfactor Command platform facilitates the management of certificates specifically for Fortigate devices. This store type is designed to represent various locations within Fortigate's environment where certificates are stored and managed. It includes repositories for local user certificates and factory certificates, among others. By leveraging this Certificate Store Type, administrators can perform critical functions like inventory, addition, and removal of certificates efficiently. + +There are a few important caveats to keep in mind when utilizing the Fortigate Certificate Store Type. Notably, it does not support the renewal or removal of certificates enrolled through Fortigate's internal CA, nor does it support factory certificates or any certificates bound to a Fortigate object. Additionally, this store type does not utilize an SDK. + +One significant limitation is the inability to perform certificate enrollments using Fortigate's internal CA, which means Keyfactor's 'reenrollment' or 'on-device key generation' functionalities are not applicable. Users should note these constraints to avoid confusion and ensure smooth operation within the supported capabilities. + + + +### Supported Job Types + +| Job Name | Supported | +| -------- | --------- | +| Inventory | ✅ | +| Management Add | ✅ | +| Management Remove | ✅ | +| Discovery | ✅ | +| Create | | +| Reenrollment | | + +## Requirements + +### Fortigate Setup + +The Fortigate Orchestrator Extension requires an API token be created in the Fortigate environment being managed. Please review the following [instructions](https://docs.fortinet.com/document/forticonverter/7.0.1/online-help/866905/connect-fortigate-device-via-api-token) for creating an API token to be used in this integration. + +### Fortigate Version Supported + +The Fortigate Orchestrator Extension was tested using Fortigate, version 7.2.4 + + + +## Certificate Store Type Configuration + +The recommended method for creating the `Fortigate` Certificate Store Type is to use [kfutil](https://github.com/Keyfactor/kfutil). After installing, use the following command to create the `` Certificate Store Type: + +```shell +kfutil store-types create Fortigate +``` + +
Fortigate + +Create a store type called `Fortigate` with the attributes in the tables below: + +### Basic Tab +| Attribute | Value | Description | +| --------- | ----- | ----- | +| Name | Fortigate | Display name for the store type (may be customized) | +| Short Name | Fortigate | Short display name for the store type | +| Capability | Fortigate | Store type name orchestrator will register with. Check the box to allow entry of value | +| Supported Job Types (check the box for each) | Add, Discovery, Remove | Job types the extension supports | +| Supports Add | ✅ | Check the box. Indicates that the Store Type supports Management Add | +| Supports Remove | ✅ | Check the box. Indicates that the Store Type supports Management Remove | +| Supports Discovery | ✅ | Check the box. Indicates that the Store Type supports Discovery | +| Supports Reenrollment | | Indicates that the Store Type supports Reenrollment | +| Supports Create | | Indicates that the Store Type supports store creation | +| Needs Server | | Determines if a target server name is required when creating store | +| Blueprint Allowed | ✅ | Determines if store type may be included in an Orchestrator blueprint | +| Uses PowerShell | | Determines if underlying implementation is PowerShell | +| Requires Store Password | ✅ | Determines if a store password is required when configuring an individual store. | +| Supports Entry Password | | Determines if an individual entry within a store can have a password. | + +The Basic tab should look like this: + +![Fortigate Basic Tab](../docsource/images/Fortigate-basic-store-type-dialog.png) + +### Advanced Tab +| Attribute | Value | Description | +| --------- | ----- | ----- | +| Supports Custom Alias | Required | Determines if an individual entry within a store can have a custom Alias. | +| Private Key Handling | Required | This determines if Keyfactor can send the private key associated with a certificate to the store. Required because IIS certificates without private keys would be invalid. | +| PFX Password Style | Default | 'Default' - PFX password is randomly generated, 'Custom' - PFX password may be specified when the enrollment job is created (Requires the Allow Custom Password application setting to be enabled.) | + +The Advanced tab should look like this: + +![Fortigate Advanced Tab](../docsource/images/Fortigate-advanced-store-type-dialog.png) + +### Custom Fields Tab +Custom fields operate at the certificate store level and are used to control how the orchestrator connects to the remote target server containing the certificate store to be managed. The following custom fields should be added to the store type: + +| Name | Display Name | Type | Default Value/Options | Required | Description | +| ---- | ------------ | ---- | --------------------- | -------- | ----------- | + + +The Custom Fields tab should look like this: + +![Fortigate Custom Fields Tab](../docsource/images/Fortigate-custom-fields-store-type-dialog.png) + + + +
+ +## Certificate Store Configuration + +After creating the `Fortigate` Certificate Store Type and installing the Fortigate Universal Orchestrator extension, you can create new [Certificate Stores](https://software.keyfactor.com/Core-OnPrem/Current/Content/ReferenceGuide/Certificate%20Stores.htm?Highlight=certificate%20store) to manage certificates in the remote platform. + +The following table describes the required and optional fields for the `Fortigate` certificate store type. + +| Attribute | Description | Attribute is PAM Eligible | +| --------- | ----------- | ------------------------- | +| Category | Select "Fortigate" or the customized certificate store name from the previous step. | | +| Container | Optional container to associate certificate store with. | | +| Client Machine | For the Client Machine field, enter the IP address or DNS name of your Fortigate server. Example: '192.168.1.1' or 'fortigate.domain.com'. | | +| Store Path | For the Store Path field, enter any value as it is not used in this integration. Example: 'NotApplicable'. | | +| Orchestrator | Select an approved orchestrator capable of managing `Fortigate` certificates. Specifically, one with the `Fortigate` capability. | | + +* **Using kfutil** + + ```shell + # Generate a CSV template for the AzureApp certificate store + kfutil stores import generate-template --store-type-name Fortigate --outpath Fortigate.csv + + # Open the CSV file and fill in the required fields for each certificate store. + + # Import the CSV file to create the certificate stores + kfutil stores import csv --store-type-name Fortigate --file Fortigate.csv + ``` + +* **Manually with the Command UI**: In Keyfactor Command, navigate to Certificate Stores from the Locations Menu. Click the Add button to create a new Certificate Store using the attributes in the table above. \ No newline at end of file diff --git a/docsource/fortigate.md b/docsource/fortigate.md new file mode 100644 index 0000000..3b30173 --- /dev/null +++ b/docsource/fortigate.md @@ -0,0 +1,18 @@ +## Overview + +The Fortigate Certificate Store Type in the Keyfactor Command platform facilitates the management of certificates specifically for Fortigate devices. This store type is designed to represent various locations within Fortigate's environment where certificates are stored and managed. It includes repositories for local user certificates and factory certificates, among others. By leveraging this Certificate Store Type, administrators can perform critical functions like inventory, addition, and removal of certificates efficiently. + +There are a few important caveats to keep in mind when utilizing the Fortigate Certificate Store Type. Notably, it does not support the renewal or removal of certificates enrolled through Fortigate's internal CA, nor does it support factory certificates or any certificates bound to a Fortigate object. Additionally, this store type does not utilize an SDK. + +One significant limitation is the inability to perform certificate enrollments using Fortigate's internal CA, which means Keyfactor's 'reenrollment' or 'on-device key generation' functionalities are not applicable. Users should note these constraints to avoid confusion and ensure smooth operation within the supported capabilities. + +## Requirements + +### Fortigate Setup + +The Fortigate Orchestrator Extension requires an API token be created in the Fortigate environment being managed. Please review the following [instructions](https://docs.fortinet.com/document/forticonverter/7.0.1/online-help/866905/connect-fortigate-device-via-api-token) for creating an API token to be used in this integration. + +### Fortigate Version Supported + +The Fortigate Orchestrator Extension was tested using Fortigate, version 7.2.4 + diff --git a/docsource/overview.md b/docsource/overview.md new file mode 100644 index 0000000..170dca5 --- /dev/null +++ b/docsource/overview.md @@ -0,0 +1,6 @@ +## Overview + +The Fortigate Universal Orchestrator extension enables remote management of cryptographic certificates on Fortigate devices via Keyfactor Command. Fortigate devices use certificates to secure communications, authenticate users, and enforce security policies across networks. + +In the context of this extension, defined Certificate Stores represent specific locations on the Fortigate device where certificates are stored and managed. These locations can include local user certificates, factory certificates, and other defined repositories. The Universal Orchestrator extension facilitates inventory, addition, renewal, and removal of certificates within these stores, streamlining the certificate management process for IT administrators. + diff --git a/integration-manifest.json b/integration-manifest.json index 7a58675..afdda45 100644 --- a/integration-manifest.json +++ b/integration-manifest.json @@ -1,58 +1,60 @@ -{ - "$schema": "https://keyfactor.github.io/integration-manifest-schema.json", - "integration_type": "orchestrator", - "name": "Fortigate", - "status": "production", - "description": "This integration is used to inventory and manage certificates in Fortigate.", - "link_github": false, - "support_level": "community", - "update_catalog": false, - "about": { - "orchestrator": { - "UOFramework": "10.1", - "pam_support": true, - "win": { - "supportsCreateStore": false, - "supportsDiscovery": false, - "supportsManagementAdd": true, - "supportsManagementRemove": true, - "supportsReenrollment": false, - "supportsInventory": true - }, - "linux": { - "supportsCreateStore": false, - "supportsDiscovery": false, - "supportsManagementAdd": true, - "supportsManagementRemove": true, - "supportsReenrollment": false, - "supportsInventory": true - }, - "store_types": { - "Fortigate": { - "Name": "Fortigate", - "ShortName": "Fortigate", - "Capability": "Fortigate", - "ServerRequired": false, - "BlueprintAllowed": true, - "CustomAliasAllowed": "Required", - "PowerShell": false, - "PrivateKeyAllowed": "Required", - "SupportedOperations": { - "Add": true, - "Create": false, - "Discovery": true, - "Enrollment": false, - "Remove": true - }, - "PasswordOptions": { - "Style": "Default", - "EntrySupported": false, - "StoreRequired": true - }, - "Properties": [], - "EntryParameters": [] - } - } - } - } +{ + "$schema": "/Users/hroszell/coding/dev/staff-tools/keyfactor.github.io/v2/integration-manifest-schema.json", + "integration_type": "orchestrator", + "name": "Fortigate", + "status": "production", + "description": "This integration is used to inventory and manage certificates in Fortigate.", + "link_github": true, + "support_level": "kf-supported", + "update_catalog": true, + "about": { + "orchestrator": { + "UOFramework": "10.1", + "pam_support": true, + "win": { + "supportsCreateStore": false, + "supportsDiscovery": false, + "supportsManagementAdd": true, + "supportsManagementRemove": true, + "supportsReenrollment": false, + "supportsInventory": true + }, + "linux": { + "supportsCreateStore": false, + "supportsDiscovery": false, + "supportsManagementAdd": true, + "supportsManagementRemove": true, + "supportsReenrollment": false, + "supportsInventory": true + }, + "store_types": [ + { + "Name": "Fortigate", + "ShortName": "Fortigate", + "Capability": "Fortigate", + "ServerRequired": false, + "BlueprintAllowed": true, + "CustomAliasAllowed": "Required", + "PowerShell": false, + "PrivateKeyAllowed": "Required", + "SupportedOperations": { + "Add": true, + "Create": false, + "Discovery": true, + "Enrollment": false, + "Remove": true + }, + "PasswordOptions": { + "Style": "Default", + "EntrySupported": false, + "StoreRequired": true + }, + "Properties": [], + "EntryParameters": [], + "ClientMachineDescription": "For the Client Machine field, enter the IP address or DNS name of your Fortigate server. Example: '192.168.1.1' or 'fortigate.domain.com'.", + "StorePathDescription": "For the Store Path field, enter any value as it is not used in this integration. Example: 'NotApplicable'." + } + ] + } + } } \ No newline at end of file