Closed nelsestu closed 1 day ago
Hi Tyler -- in LHDI office hours today, Gabe asked our team to send you this ticket so you could help us to better understand whether VRO is clear about our onboarding status with Venafi -- or whether there are recommended next steps from LHDI for resolving this request from PKI Ops Team? If you could reply here with your feedback on whether this reply above that was sent from @nelsestu to PKI Ops Team will suffice or if we should take additional steps, we would appreciate any assistance. Thanks so much! cc: @CorySohrakoffUSDS @jstrothman @amylai-va @meganhicks
Here's the Slack thread just sent to Tyler Snell in LHDI Slack: https://lighthouseva.slack.com/archives/C03UA9MV1EH/p1724258462778789
Tyler passed our inquery on as a ticket that we can track here: https://github.com/department-of-veterans-affairs/lighthouse-di-tenant-support/issues/38
Tyler confirms that: "VRO should not need direct access to Venafi, as they have the ability to create and manage certificates through cert-manager which then uses the VA's Venafi instance on the back-end of LHDI."
In this case, we'll consider the case closed. They've heard from us and we've confirmed that we are using Venafi certificate-generation capabilities through LHDI's integration with them. We have what we need and they have what they need.
Closing this ticket since LHDI has responded to our question and there's no additional action needed on VRO's end.
As a VRO Platform team member, we need to understand and respond to a request that we've received from the PKI Operations Team regarding our Venafi Onboarding Status. Specifically the message was sent from a shared mailbox: "OIT Venafi Mailbox" OITVenafiMailbox@va.gov stating:
Please see the [[Original Message Content]] section below for the full message from PKI Operations.
What we do know:
Acceptance Criteria:
Original Message Content:
You have been identified as the Point of Contact for VASI Systems under the Software Factory (SWF) Systems not onboarded to Venafi (see list below).
Our PKI Operations Team is reaching out to help you onboard to the Venafi Trust Protection Platform, which manages and maintains Public Key Infrastructure (PKI) certificates for the VA Enterprise. This effort supports the VA’s focus to prevent an outage due to an expired PKI certificate, which will disrupt our Veterans care.
Please reply back to this Email with your System’s onboarding status to Venafi. If your System does not use SSL/TLS PKI Certificates, please also reply and with your statement. OIT Leadership wants us to track the onboarding status. We have the resources below to help you onboard with either the regular or elevated account.
For additional assistance, the Venafi PKI Operations Team will have weekly open Onboarding meetings every Tuesdays at 11am CST. You may join to ask questions and request a demonstration of the Venafi User Portal and its features.
Open Venafi Onboarding Meeting Meeting ID: xxx Passcode: xxx
Best Regards, PKI Operations Team
Erik's Follow up Response