Skip to content
Docs sslbrain sslbrain.com

Integrations

Copy link to the page “Integrations”

An integration is a place sslbrain installs certificates: a service on a server, a device or a cloud service. Search, or filter by operating system and type. Each card opens the integration’s guide with the steps, ports and access it needs. The packages and versions your appliance has are under Agents › Definitions.

All integrations

Copy link to the section “All integrations”

Showing 44 of 44 integrations

How packages run

Copy link to the section “How packages run”
PlatformWhere the package runs
Windows serversOn the server, through the service agent (Windows servers)
Linux serversOn the server, through the service agent (Linux servers)
Cloud services, firewalls, load balancers, storage and vCenterOn the appliance, which calls the device’s API with the credential from Credentials (API)
pfSense and VMware ESXiOn the device, over SSH
Fortinet FortiMailOn the appliance, which drives the FortiMail command line over SSH
  • When a server has an approved service agent, everything on that server runs through the agent. The agent collects the task at its next check-in.
  • Discovery on the server picks the package for each service. An IIS binding gets iis8plus, Exchange gets exchange2013-2019. You choose the services in the rule (step 8).
  • FairSSL signs every package. The appliance and the service agent check the signature before the package runs (signing).

Agents › Definitions

Copy link to the section “Agents › Definitions”

Shows the packages the appliance has, what they can do, and which version is installed. All users can see the page. Which versions may run is controlled under Agents › Settings.

Agents › Catalogue

Copy link to the section “Agents › Catalogue”

The page is called Agent catalogue and is for administrators. It shows each package’s versions, their signature (Verified, Invalid or Unsigned) and the version that is running (Runs …).

  • Preview shows the script.
  • Import approves a version. Upgrade moves to a newer one.
  • Custom agents is for your own scripts (Your own scripts).

Agents › Settings

Copy link to the section “Agents › Settings”

The page is called Agent settings and is for administrators. It decides how updated versions of the packages reach the servers.

  • Approve new versions automatically (recommended): the packages always run the latest signed version, including packages you approved by hand. The signature is checked before use. The switch also turns on Download new versions automatically.
  • Download new versions automatically: downloads new versions of the packages and the service agent’s installation packages from sslbrain Cloud. They appear in Agents › Catalogue, so you can review them before you approve.

If you turn off Approve new versions automatically (recommended), the versions running now are approved in your name, so the rules keep running. Later versions run only once an administrator approves them in Agents › Catalogue.

The operation mode chosen during setup set the starting value: Auto turns automatic approval on, Manual turns it off.

Packages that only find certificates

Copy link to the section “Packages that only find certificates”

Milestone XProtect and Veeam Backup & Replication have packages that find services and certificates but do not install them. They are in the overview with the label Finds certificates only, and their certificates show under Certificates › Found on servers. IIS and Exchange also have a package that only finds; it belongs to the integration’s card, together with the package that installs.

Platforms not in the catalogue

Copy link to the section “Platforms not in the catalogue”

Upload your own script as a custom agent. See Your own scripts and Servers sslbrain does not know.