If required by the certificate profile, add one or more Destinations to publish the issued certificate.
If you selected a Key Manager, ensure the Allow private key export option is enabled on this Key Manager to add additional destinations for this certificate.
To add a destination
- In the Destinations list, select a destination previously created as explained in the following sections. - Creating a HashiCorp Vault destination
- Creating a Microsoft IIS web server destination
- Creating an Apache web server destination
- Creating an AWS Certificate Manager destination
- Creating an Azure Key Vault destination
- Creating an F5 BIG-IP destination
- Creating an Nginx web server destination
- Creating an SFTP destination
 
- Click Add to confirm the selection. - Apache and Nginx destinations do not support adding several destinations or other key managers. 
- If required, configure destination-specific parameters.
F5 BIG-IP destination-specific settings
Configure the following additional settings when adding a destination of the F5 BIG-IP type.
| Setting | Value | 
|---|---|
| Client SSL Profile | A BIG-IP Client SSL profile | 
| Server SSL Profile | A BIG-IP Server SSL profile | 
See techdocs.f5.com for a reference of the supported BIG-IP Client SSL profiles.
Microsoft IIS destination-specific settings
When adding a destination of the Microsoft IIS type, enter one or more site bindings in the Site bindings field. Define each binding with a line in the following syntax.
<name>;<host>;<port>Where:
- <name>is the website name
- <host>is the website hostname or IP address
- <port>is the port for connecting to the website.
Select a certificate profile with "Web Server" or dual usage (key encipherment and digital signature) to deploy the certificate successfully.