{"id":25190113,"url":"https://github.com/keyfactor/globalsign-atlas-cagateway","last_synced_at":"2026-02-04T10:01:57.839Z","repository":{"id":104073283,"uuid":"484047040","full_name":"Keyfactor/globalsign-atlas-cagateway","owner":"Keyfactor","description":"CAGateway to integrate with GlobalSign's Atlas platform","archived":false,"fork":false,"pushed_at":"2024-11-20T16:47:36.000Z","size":55,"stargazers_count":1,"open_issues_count":1,"forks_count":1,"subscribers_count":3,"default_branch":"main","last_synced_at":"2025-05-25T12:02:25.703Z","etag":null,"topics":["keyfactor-cagateway"],"latest_commit_sha":null,"homepage":"","language":"C#","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Keyfactor.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-04-21T12:42:07.000Z","updated_at":"2024-06-11T20:25:09.000Z","dependencies_parsed_at":null,"dependency_job_id":"a407f320-84e3-4109-92a3-c9a71a310441","html_url":"https://github.com/Keyfactor/globalsign-atlas-cagateway","commit_stats":null,"previous_names":[],"tags_count":13,"template":false,"template_full_name":null,"purl":"pkg:github/Keyfactor/globalsign-atlas-cagateway","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keyfactor%2Fglobalsign-atlas-cagateway","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keyfactor%2Fglobalsign-atlas-cagateway/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keyfactor%2Fglobalsign-atlas-cagateway/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keyfactor%2Fglobalsign-atlas-cagateway/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Keyfactor","download_url":"https://codeload.github.com/Keyfactor/globalsign-atlas-cagateway/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Keyfactor%2Fglobalsign-atlas-cagateway/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29080775,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-04T03:31:03.593Z","status":"ssl_error","status_checked_at":"2026-02-04T03:29:50.742Z","response_time":62,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["keyfactor-cagateway"],"created_at":"2025-02-09T21:18:57.336Z","updated_at":"2026-02-04T10:01:57.800Z","avatar_url":"https://github.com/Keyfactor.png","language":"C#","funding_links":[],"categories":[],"sub_categories":[],"readme":"# GlobalSign Atlas AnyGateway\n## Ca-gateway\n\nThis integration allows for the Synchronization, Enrollment, and Revocation of TLS Certificates from the GlobalSign Atlas platform.\n\n*** \n# Introduction\nThis AnyGateway plug-in enables issuance, revocation, and synchronization of certificates from GlobalSign's Atlas platform.  \n# Prerequisites\n\n## Port Access\nThe GlobalSign Atlas CA Gateway makes outbound connections on port 8443. Make sure that port is accessible for outbound communications.\n\n## mTLS Certificate\nThe mTLS certificate obtained from GlobalSign to use as the client certificate should be installed in the local machine certificate store on the Gateway server\nThe gateway service account (default Network Service) should be granted Read permission on the private key of the certificate\n\n## Certificate Chain\n\nIn order to enroll for certificates the Keyfactor Command server must trust the trust chain. Once you create your Root and/or Subordinate CA, make sure to import the certificate chain into the AnyGateway and Command Server certificate store\n\n# Install\n* Download latest successful build from [GitHub Releases](/releases/latest)\n\n* Copy GlobalSignAtlasCAGateway.dll to the Program Files\\Keyfactor\\Keyfactor AnyGateway directory\n\n* Update the CAProxyServer.config file\n  * Update the CAConnection section to point at the GlobalSignCAProxy class\n  ```xml\n  \u003calias alias=\"CAConnector\" type=\"Keyfactor.Extensions.AnyGateway.GlobalSign.Atlas.GlobalSignAtlasCAConnector, GlobalSignAtlasCAGateway\"/\u003e\n  ```\n\n# Configuration\nThe following sections will breakdown the required configurations for the AnyGatewayConfig.json file that will be imported to configure the AnyGateway.\n\n## Templates\nThe Template section will map the CA's SSL profile to an AD template.\n* ```ProductID```\nNot used for the Atlas gateway, but cannot be left blank\n* ```Lifetime```\nThe lifetime to use for enrollment, in days.\n* ```KeyUsage```\nThe key usage to use for enrolled certs. Valid values are 'client', 'server', and 'clientserver'\n\n ```json\n  \"Templates\": {\n\t\"WebServer\": {\n      \"ProductID\": \"certificate\",\n      \"Parameters\": {\n\t\t\"Lifetime\":\"365\",\n        \"KeyUsage\":\"clientserver\"\n      }\n   }\n}\n ```\n## Security\nThe security section does not change specifically for the GlobalSign CA Gateway.  Refer to the AnyGateway Documentation for more detail.\n```json\n  /*Grant permissions on the CA to users or groups in the local domain.\n\tREAD: Enumerate and read contents of certificates.\n\tENROLL: Request certificates from the CA.\n\tOFFICER: Perform certificate functions such as issuance and revocation. This is equivalent to \"Issue and Manage\" permission on the Microsoft CA.\n\tADMINISTRATOR: Configure/reconfigure the gateway.\n\tValid permission settings are \"Allow\", \"None\", and \"Deny\".*/\n    \"Security\": {\n        \"Keyfactor\\\\Administrator\": {\n            \"READ\": \"Allow\",\n            \"ENROLL\": \"Allow\",\n            \"OFFICER\": \"Allow\",\n            \"ADMINISTRATOR\": \"Allow\"\n        },\n        \"Keyfactor\\\\gateway_test\": {\n            \"READ\": \"Allow\",\n            \"ENROLL\": \"Allow\",\n            \"OFFICER\": \"Allow\",\n            \"ADMINISTRATOR\": \"Allow\"\n        },\t\t\n        \"Keyfactor\\\\SVC_TimerService\": {\n            \"READ\": \"Allow\",\n            \"ENROLL\": \"Allow\",\n            \"OFFICER\": \"Allow\",\n            \"ADMINISTRATOR\": \"None\"\n        },\n        \"Keyfactor\\\\SVC_AppPool\": {\n            \"READ\": \"Allow\",\n            \"ENROLL\": \"Allow\",\n            \"OFFICER\": \"Allow\",\n            \"ADMINISTRATOR\": \"Allow\"\n        }\n    }\n```\n## CerificateManagers\nThe Certificate Managers section is optional.\n\tIf configured, all users or groups granted OFFICER permissions under the Security section\n\tmust be configured for at least one Template and one Requester. \n\tUses \"\u003cAll\u003e\" to specify all templates. Uses \"Everyone\" to specify all requesters.\n\tValid permission values are \"Allow\" and \"Deny\".\n```json\n  \"CertificateManagers\":{\n\t\t\"DOMAIN\\\\Username\":{\n\t\t\t\"Templates\":{\n\t\t\t\t\"MyTemplateShortName\":{\n\t\t\t\t\t\"Requesters\":{\n\t\t\t\t\t\t\"Everyone\":\"Allow\",\n\t\t\t\t\t\t\"DOMAIN\\\\Groupname\":\"Deny\"\n\t\t\t\t\t}\n\t\t\t\t},\n\t\t\t\t\"\u003cAll\u003e\":{\n\t\t\t\t\t\"Requesters\":{\n\t\t\t\t\t\t\"Everyone\":\"Allow\"\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n```\n## CAConnection\nThe CA Connection section will determine the API endpoint and configuration data used to connect to the GlobalSign Atlas CA. \n* ```ApiKey```\nThe API key for the Atlas credentials the gateway will use.  \n* ```ApiSecret```\nThe corresponding API secret value that matches with the ApiKey\n* ```ClientCertificate```\nThe location and thumbprint of the client auth certificate to use with the Atlas API\n* ```SyncStartDate```\nThe earliest date to go back when doing a full sync\n* ```PickupRetries```\n(OPTIONAL)This is the number of times the AnyGateway will attempt to pickup an new certificate before reporting an error. This setting applies to new, renewed, or reissued certificates. Default is 5.\n* ```PickupDelay```\n(OPTIONAL)This is the number of seconds between retries when attempting to download a certificate. Default is 5.\n\n```json\n  \"CAConnection\": {\n\t\"ApiKey\":\"\u003capi key\u003e\",\n\t\"ApiSecret\":\"\u003capi secret\u003e\",\n\t\"ClientCertificate\": {\n\t\t\"StoreName\": \"My\",\n\t\t\"StoreLocation\": \"LocalMachine\",\n\t\t\"Thumbprint\": \"0123456789abcdef\"\n\t},\n\t\"SyncStartDate\":\"2022-01-01\",\n    \"PickupRetries\":5,\n\t\"PickupDelay\":5,\n  },\n```\n## GatewayRegistration\nThere are no specific Changes for the GatewayRegistration section. Refer to the AnyGateway Documentation for more detail.\n```json\n  \"GatewayRegistration\": {\n    \"LogicalName\": \"AtlasCASandbox\",\n    \"GatewayCertificate\": {\n      \"StoreName\": \"CA\",\n      \"StoreLocation\": \"LocalMachine\",\n      \"Thumbprint\": \"bc6d6b168ce5c08a690c15e03be596bbaa095ebf\"\n    }\n  }\n```\n\n## ServiceSettings\nThere are no specific Changes for the ServiceSettings section. Refer to the AnyGateway Documentation for more detail.\n```json\n  \"ServiceSettings\": {\n    \"ViewIdleMinutes\": 8,\n    \"FullScanPeriodHours\": 24,\n\t\"PartialScanPeriodMinutes\": 240 \n  }\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkeyfactor%2Fglobalsign-atlas-cagateway","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkeyfactor%2Fglobalsign-atlas-cagateway","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkeyfactor%2Fglobalsign-atlas-cagateway/lists"}