Skip to main content
Infisical supports connecting to Progress Kemp LoadMaster load balancers using basic authentication credentials for managing SSL certificates via the RESTful API.

Setup

1

Enable the LoadMaster API Interface

On the LoadMaster, go to Certificates & Security > Remote Access and enable the API Interface checkbox. The RESTful API is disabled by default, and certificate management requires it to be enabled.
2

Gather Kemp LoadMaster Credentials

You will need the following from your LoadMaster:
  • Hostname: The management IP address or FQDN of your LoadMaster (for example 192.168.1.100 or lm.example.com).
  • Port: The HTTPS management port (default 8443).
  • Username: A user with permission to manage SSL certificates.
  • Password: The password for the user account.
The user account must have permission to manage SSL certificates and, if you bind certificates to a Virtual Service, to modify Virtual Services.
3

Navigate to App Connections

In Certificate Manager, navigate to Settings > App Connections and click Add Connection.
4

Select Kemp LoadMaster

Select the Kemp LoadMaster option from the list of available connections.
5

Fill in Connection Details

Fill in the Configuration tab:
  • Hostname: The management IP or FQDN of the LoadMaster.
  • Username: The LoadMaster management username.
  • Password: The password for the management user.
  • Port (Optional): HTTPS port for the management interface (default 8443).
Configure the SSL tab:
  • SSL Certificate (Optional): A CA certificate in PEM format to verify the LoadMaster management interface’s TLS certificate.
  • Reject Unauthorized: When enabled, Infisical will only connect if the LoadMaster has a valid, trusted TLS certificate. Disable this for self-signed certificates or provide a CA certificate.
Optionally select a Gateway to route the connection through an Infisical Gateway for private network access.Click Connect to Kemp LoadMaster to validate and save your connection.
6

Connection Created

Your Kemp LoadMaster Connection is now available for use with certificate syncs.