Unix Provider
Deploys certificates to Linux servers via SSH, using a CLM agent as an intermediary.
Prerequisites
- Linux CLM agent installed and online on the target server, or with SSH access to the server
- SSH user with write permission on the target file paths
Create via the Stores screen
Step 1 — Provider
Select Unix Provider.
Step 2 — Agent
Select the Linux agent that will establish the SSH connection to the target server.
Step 3 — Configuration
SSH Connection:
| Field | Description |
|---|---|
| Host / IP | Address of the target server |
| SSH Port | SSH port (default: 22) |
| SSH User | User with write permission on the configured paths |
| SSH Password | User's password (optional if using an SSH key) |
Certificate file paths:
| Field | Description |
|---|---|
| Certificate file path | Full path to the certificate file, e.g. /etc/ssl/certs/ssl-cert.pem |
| Private key file path | Full path to the private key file, e.g. /etc/ssl/private/ssl-cert.key |
| CA Chain file path | Full path to the CA chain file (optional) |
Service configuration:
| Field | Description |
|---|---|
| Reload command | Command executed on the server after the certificate deploy, e.g. systemctl reload nginx |
Step 4 — Review
Set the Repository Name, confirm the settings, and click Create Repository.
How the deploy works
When a certificate is installed or renewed, the CLM:
- Connects to the server via SSH using the configured agent
- Writes the files to the configured paths (certificate, key, chain)
- Runs the Reload command to apply the new certificate to the service
Install a certificate
On the Store details screen, click Install Certificate, select the certificate from the inventory, and confirm.