Updated Venafi Cloud integration to use OutagePREDICT instead of DevOpsACCELERATE.
Enhanced monitoring behavior to allow limiting Venafi import to certificates a Vault CA issues that do not comply with Venafi policy.
Updated credential requirements for Trust Protection Platform to support initialization with only a refresh_token
.
Introduced Venafi Secret for specifying Venafi connection and authentication settings.
Added support for token authentication with Trust Protection Platform (API Application ID "hashicorp-vault-monitor-by-venafi").
Deprecated legacy username/password for Trust Protection Platform.
Resolved Vault Enterprise issue involving behavior when interacting with Performance Standby or Performance Secondary.
Added option to automatically synchronize PKI role settings with Venafi Policy.
Updated Venafi Policy to solely govern the roles to which it enforces policy and default values, and roles from which it imports certificates into Venafi.
Dropped support for apikey
, tpp_url
, tpp_username
, tpp_password
, zone
, trust_bundle_file
, venafi_import
, venafi_import_timeout
, venafi_import_workers
, and venafi_check_policy
role settings.
Added Source Application Tagging for Trust Protection Platform and Venafi Cloud.
Dropped support for previously deprecated tpp_import
, tpp_import_timeout
, and tpp_import_workers
parameters.
Resolved issue where Vault stopped issuing certifcates after importing hundreds/thousands of certificates into Venafi.
Resolved issue where secrets engine would try indefinitely to import certificates that were rejected because they don't comply with policy (i.e. key reused)
Resolved issue involving Venafi Policy enforcement of key size
Resolved issue involving Venafi Policy enforcement of domains with TPP.
Resolved issue with plugin running Vault on Windows.
Added visibility into certificates issued by the Vault CA for Venafi Cloud.
Enhanced secrets engine to start import queue automatically after Vault restart.
Offer "strict" and "optional" plugin binaries to choose whether compliance with Venafi Policy is required ("optional" targeting test/dev use cases).
Added Venafi Policy Enforcement to check certificate requests for compliance with Venafi Policy.
Initial Release, provides visibility into certificates issued by the Vault CA for Trust Protection Platform.