Server and Agent SSL certificate management through the DWC

SSL certificates have always been an important requirement for IWS/IWA. This continues to increase as organisations move toward public cloud infrastructure. This is especially true of cloud kubernetes services such as AKS, EKS & GKS. Most customers are moving towards a hybrid today or in the near future. Some have taken the decision to move solely to cloud, in both cases the use of SSL certificates are mandated by IT security with IWS/IWA.

Loading certs into DWC, MDM & Agent stores are currently done manually on compute infrastructure using the Keytool command. The same feature is achived using kubernetes secrets in containerised IWS. Both of these are cumbersome and the only way to determine problems is through the command line. This is unacceptable and our competitors have better cert management capabilities.

A better solution for SSL Certiciate management is required in IWS/IWA. Visability and management of SSL certificates through the DWC is needed. New options are needed in the Monitor Workstations to integrate with keytool, openssl and ikeyman on both the server and agent components of IWS/IWA. This will allow IWS administrators to manage SSL certificates without the need to be SSL experts and figure out how to do it from the command line. Given the rate of change with certificates in high security environments (i.e. as little as 3 months), this becomes an urgent problem to fix within IWS/IWA.