integration-manifest.json

{
  "$schema": "https://keyfactor.github.io/integration-manifest-schema.json",
  "integration_type": "orchestrator",
  "name": "Palo Alto Orchestrator",
  "status": "production",
  "update_catalog": true,
  "link_github": true,
  "support_level": "kf-supported",
  "release_project": "PaloAlto/PaloAlto.csproj",
  "release_dir": "PaloAlto/bin/Release",
  "description": "The Palo Alto Orchestrator remotely manages certificates on either the Palo Alto PA-VM Firewall Device or the Panorama.  If using Panorama, it will push changes to all the devices from Panorama.  It supports adding certificates with or without private keys.  Palo Alto does not support incremental certificate inventory. If you have large numbers of certificates in your environment it is recommended to limit the frequency of inventory jobs to 30 minutes or more.",
  "about": {
    "orchestrator": {
      "UOFramework": "10.4",
      "keyfactor_platform_version": "10.4",
      "pam_support": true,
      "keyfactor_platform_version": "10.4",
      "win": {
        "supportsCreateStore": false,
        "supportsDiscovery": false,
        "supportsManagementAdd": true,
        "supportsManagementRemove": true,
        "supportsReenrollment": false,
        "supportsInventory": true,
        "platformSupport": "Unused"
      },
      "linux": {
        "supportsCreateStore": false,
        "supportsDiscovery": false,
        "supportsManagementAdd": false,
        "supportsManagementRemove": false,
        "supportsReenrollment": false,
        "supportsInventory": false,
        "platformSupport": "Unused"
      },
      "store_types": [
        {
          "Name": "PaloAlto",
          "ShortName": "PaloAlto",
          "Capability": "PaloAlto",
          "LocalStore": false,
          "SupportedOperations": {
            "Add": true,
            "Create": false,
            "Discovery": false,
            "Enrollment": false,
            "Remove": true
          },
          "Properties": [
            {
              "Name": "ServerUsername",
              "DisplayName": "Server Username",
              "Type": "Secret",
              "DependsOn": "",
              "DefaultValue": "",
              "Required": false,
              "IsPAMEligible": true,
              "Description": "Palo Alto or Panorama Api User. (or valid PAM key if the username is stored in a KF Command configured PAM integration)."
            },
            {
              "Name": "ServerPassword",
              "DisplayName": "Server Password",
              "Type": "Secret",
              "DependsOn": "",
              "DefaultValue": "",
              "Required": false,
              "IsPAMEligible": true,
              "Description": "Palo Alto or Panorama Api Password. (or valid PAM key if the username is stored in a KF Command configured PAM integration)."
            },
            {
              "Name": "ServerUseSsl",
              "DisplayName": "Use SSL",
              "Type": "Bool",
              "DependsOn": "",
              "DefaultValue": "true",
              "Required": true,
              "IsPAMEligible": false,
              "Description": "Should be true, http is not supported."
            },
            {
              "Name": "DeviceGroup",
              "DisplayName": "Device Group",
              "Type": "String",
              "DependsOn": "",
              "DefaultValue": "",
              "Required": false,
              "IsPAMEligible": false,
              "Description": "A semicolon delimited list of Device Groups that Panorama will push changes to (i.e. 'Group 1', 'Group 1;Group 2', or 'Group 1; Group 2', etc.)."
            },
            {
              "Name": "InventoryTrustedCerts",
              "DisplayName": "Inventory Trusted Certs",
              "Type": "Bool",
              "DependsOn": "",
              "DefaultValue": "false",
              "Required": true,
              "IsPAMEligible": false,
              "Description": "If false, will not inventory default trusted certs, saves time."
            },
            {
              "Name": "TemplateStack",
              "DisplayName": "Template Stack",
              "Type": "String",
              "DependsOn": "",
              "DefaultValue": "",
              "Required": false,
              "IsPAMEligible": false,
              "Description": "Template stack used for device push of certificates via Template."
            }
          ],
          "EntryParameters": [

          ],
          "ClientMachineDescription": "Either the Panorama or Palo Alto Firewall URI or IP address.",
          "StorePathDescription": "The Store Path field should be reviewed in the store path explanation section.  It varies depending on configuration.",
          "PasswordOptions": {
            "EntrySupported": false,
            "StoreRequired": false,
            "Style": "Default"
          },
          "PrivateKeyAllowed": "Optional",
          "JobProperties": [

          ],
          "ServerRequired": true,
          "PowerShell": false,
          "BlueprintAllowed": false,
          "CustomAliasAllowed": "Required"
        }
      ]
    }
  }
}