Create an Enhanced Discovery service
Table of Contents
Expand all | Collapse all
-
- Activate Next-Generation Trust Security
-
-
- Configure AWS connection
- Configure Azure Key Vault connection
-
- Workload Identity Federation authentication
- Workload Identity Federation - Azure Identity Provider authentication
- Next-Gen Trust Security Generated Key authentication
- User permissions
- Workload Identity Federation authentication
- Next-Gen Trust Security Generated Key authentication
- User permissions
- Supported OIDC claims
-
-
-
-
- Create an F5 BIG-IP LTM machine
- Create a Microsoft Azure Private Key Vault machine
- Create a Microsoft IIS machine
- Create a Microsoft Windows (PowerShell) machine
- Create a Microsoft SQL Server machine
- Create a Common KeyStore machine
- Create a Citrix ADC machine
- Create an Imperva WAF machine
- Create a VMware NSX Advanced Load Balancer (AVI) machine
- Create an A10 Thunder ADC machine
- Create a Cloudflare machine
- Create Kemp Virtual LoadMaster machine
- Create a Palo Alto Panorama machine
-
- Provision to an F5 BIG-IP LTM
- Provision to a Microsoft Azure Private Key Vault
- Provision to Microsoft IIS
- Provision to Microsoft Windows (PowerShell)
- Provision to Microsoft SQL Server
- Provision to a Common KeyStore
- Provision to a Citrix ADC
- Provision to an Imperva WAF
- Provision to VMware NSX Advanced Load Balancer (AVI)
- Provision to an A10 Thunder ADC
- Provision to Cloudflare
- Provision to a Kemp Virtual LoadMaster
- Provision to Palo Alto Panorama
-
-
- 47-Day Validity Readiness TLS Certificates dashboard
- About the Certificate Inventory
- Managing certificate lifecycle settings
- Reissuing certificates in Next-Gen Trust Security
- Downloading certificates, certificate chains, and keystores
- Retiring, recovering, and deleting certificates
- Finding certificates in the certificate inventory
- Importing certificates from a CA using EJBCA
- Notification Center overview
- Domain-based validation for external emails
- Managing user accounts
- Troubleshooting
Create an Enhanced Discovery service
Create and run an Enhanced Discovery service to perform certificate discoveries inside of your company's network. You can schedule Enhanced Discovery services to run according to a fixed schedule, or run your service immediately and anytime you need to.
Enhanced Discovery takes advantage of Venafi's VSatellites to extend the reach of your Next-Gen Trust Security account beyond public networks to discover certificates within your on-premise/private networks and machines.
This discovery service validates discovered certificates automatically.
Before you begin
Make sure you have a healthy VSatellite ready for use with your new discovery service. VSatellite helps you discover certificates on endpoints in your private network using either a schedule or by running your enhanced discovery service manually.
To create an Enhanced Discovery service
- Sign in to Next-Gen Trust Security.
- Click Configuration > Network Discovery.
- Click New > Enhanced discovery and follow the remaining prompts.
- When prompted to select a VSatellite, choose a primary VSatellite that is part of a high availability (HA) group if you want this service to benefit from HA. The system will automatically use any healthy VSatellite in the group to initiate future discovery operations. Learn more
After your new service is created, you can choose to run it immediately.
What's next?
After you perform a discovery, it's a good idea to then assign certificates to applications.
Learn more about how to manage your existing VSatellites, or about how VSatellites work.