Skip to content

SIG Credentials Feature Template

Configure Cisco Security Internet Gateway (SIG) credentials feature templates to automate tunnel provisioning.

Diagram
NameTypeConstraintMandatoryDefault Value
sig_credentials_templatesList[sig_credentials_templates]No

sig_credentials_templates (sdwan.edge_feature_templates)

Section titled “sig_credentials_templates (sdwan.edge_feature_templates)”
NameTypeConstraintMandatoryDefault Value
nameChoiceCisco-Umbrella-Global-Credentials, Cisco-Zscaler-Global-CredentialsYes
umbrella_api_keyStringRegex: ^[0-9a-z]{1,32}$No
umbrella_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_api_secretStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
umbrella_api_secret_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_organization_idIntegermin: 1000000, max: 9999999No
umbrella_organization_id_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_organizationStringNo
zscaler_organization_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_base_uriStringNo
zscaler_partner_base_uri_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_usernameStringNo
zscaler_username_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_passwordStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
zscaler_password_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_api_keyStringmin: 1, max: 12No
zscaler_partner_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No

Example-1: This example shows how to configure a SIG credentials feature template for Cisco Umbrella. The template includes the global credentials required for Umbrella integration, such as the API key, API secret, and organization ID. These parameters enable automated provisioning and secure connectivity to Cisco Umbrella services within the SD-WAN environment.

sdwan:
edge_feature_templates:
sig_credentials_templates:
- name: Cisco-Umbrella-Global-Credentials
umbrella_api_key_variable: umbrella_api_key_var
umbrella_api_secret_variable: umbrella_api_secret_var
umbrella_organization_id: 1000001

Example-2: This example demonstrates how to configure a SIG credentials feature template for Cisco Zscaler. The template includes the required global credentials for Zscaler integration, such as the partner API key, username, password, base URI, and organization name. These parameters enable secure authentication and automated connectivity to Cisco Zscaler services within the SD-WAN environment.

sdwan:
edge_feature_templates:
sig_credentials_templates:
- name: Cisco-Zscaler-Global-Credentials
zscaler_organization: ciscozscalerorganization
zscaler_partner_base_uri: https://ciscozscalerpartnerbaseuri
zscaler_username: ciscozscalerusername
zscaler_password_variable: zscaler_password_var
zscaler_partner_api_key_variable: zscaler_partner_api_key_var

Configure Cisco Security Internet Gateway (SIG) credentials feature templates to automate tunnel provisioning.

Diagram
NameTypeConstraintMandatoryDefault Value
sig_credentials_templatesList[sig_credentials_templates]No

sig_credentials_templates (sdwan.edge_feature_templates)

Section titled “sig_credentials_templates (sdwan.edge_feature_templates)”
NameTypeConstraintMandatoryDefault Value
nameChoiceCisco-Umbrella-Global-Credentials, Cisco-Zscaler-Global-CredentialsYes
umbrella_api_keyStringRegex: ^[0-9a-z]{1,32}$No
umbrella_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_api_secretStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
umbrella_api_secret_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_organization_idIntegermin: 1000000, max: 9999999No
umbrella_organization_id_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_organizationStringNo
zscaler_organization_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_base_uriStringNo
zscaler_partner_base_uri_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_usernameStringNo
zscaler_username_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_passwordStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
zscaler_password_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_api_keyStringmin: 1, max: 12No
zscaler_partner_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No

sdwan:
edge_feature_templates:
sig_credentials_templates:
- name: Cisco-Umbrella-Global-Credentials
umbrella_api_key: 7f33d6ee0d56402c83c503a669a80d22
umbrella_api_secret: $CRYPT_CLUSTER$5dYqYjx7vO3/77uFutA+Sg==$m0ROjLW4OiuqFNkDQUFwoSwjbFB3aYhTj2KL+/g2HKygHy/EgUInhDtHXCUuKrxq
umbrella_organization_id: 1234567

Configure Cisco Security Internet Gateway (SIG) credentials feature templates to automate tunnel provisioning.

Diagram
NameTypeConstraintMandatoryDefault Value
sig_credentials_templatesList[sig_credentials_templates]No

sig_credentials_templates (sdwan.edge_feature_templates)

Section titled “sig_credentials_templates (sdwan.edge_feature_templates)”
NameTypeConstraintMandatoryDefault Value
nameChoiceumbrella, zscalerYes
umbrella_api_keyStringRegex: ^[0-9a-z]{1,32}$No
umbrella_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_api_secretStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
umbrella_api_secret_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_organization_idIntegermin: 1000000, max: 9999999No
umbrella_organization_id_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_organizationStringNo
zscaler_organization_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_base_uriStringNo
zscaler_partner_base_uri_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_usernameStringNo
zscaler_username_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_passwordStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
zscaler_password_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_api_keyStringRegex: ^[0-9a-z]{1,12}$No
zscaler_partner_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No

sdwan:
edge_feature_templates:
sig_credentials_templates:
- name: FT-CEDGE-SIG-CREDS-UMBRELLA-01
description: "Global Umbrella SIG Credentials"
umbrella_api_key: 7f33d6ee0d56402c83c503a669a80d22
umbrella_api_secret: $CRYPT_CLUSTER$5dYqYjx7vO3/77uFutA+Sg==$m0ROjLW4OiuqFNkDQUFwoSwjbFB3aYhTj2KL+/g2HKygHy/EgUInhDtHXCUuKrxq
umbrella_organization_id: 1234567

Configure Cisco Security Internet Gateway (SIG) credentials feature templates to automate tunnel provisioning.

Diagram
NameTypeConstraintMandatoryDefault Value
sig_credentials_templatesList[sig_credentials_templates]No

sig_credentials_templates (sdwan.edge_feature_templates)

Section titled “sig_credentials_templates (sdwan.edge_feature_templates)”
NameTypeConstraintMandatoryDefault Value
nameChoiceumbrella, zscalerYes
umbrella_api_keyStringRegex: ^[0-9a-z]{1,32}$No
umbrella_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_api_secretStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
umbrella_api_secret_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_organization_idIntegermin: 1000000, max: 9999999No
umbrella_organization_id_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_organizationStringNo
zscaler_organization_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_base_uriStringNo
zscaler_partner_base_uri_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_usernameStringNo
zscaler_username_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_passwordStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
zscaler_password_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_api_keyStringRegex: ^[0-9a-z]{1,12}$No
zscaler_partner_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No

sdwan:
edge_feature_templates:
sig_credentials_templates:
- name: FT-CEDGE-SIG-CREDS-UMBRELLA-01
description: "Global Umbrella SIG Credentials"
umbrella_api_key: 7f33d6ee0d56402c83c503a669a80d22
umbrella_api_secret: $CRYPT_CLUSTER$5dYqYjx7vO3/77uFutA+Sg==$m0ROjLW4OiuqFNkDQUFwoSwjbFB3aYhTj2KL+/g2HKygHy/EgUInhDtHXCUuKrxq
umbrella_organization_id: 1234567

Configure Cisco Security Internet Gateway (SIG) credentials feature templates to automate tunnel provisioning.

Diagram
NameTypeConstraintMandatoryDefault Value
sig_credentials_templatesList[sig_credentials_templates]No

sig_credentials_templates (sdwan.edge_feature_templates)

Section titled “sig_credentials_templates (sdwan.edge_feature_templates)”
NameTypeConstraintMandatoryDefault Value
nameChoiceumbrella, zscalerYes
umbrella_api_keyStringRegex: ^[0-9a-z]{1,32}$No
umbrella_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_api_secretStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
umbrella_api_secret_variableStringRegex: ^[^"~`$&+,]{1,255}$No
umbrella_organization_idIntegermin: 1000000, max: 9999999No
umbrella_organization_id_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_organizationStringNo
zscaler_organization_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_base_uriStringNo
zscaler_partner_base_uri_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_usernameStringNo
zscaler_username_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_passwordStringstarts_with: $CRYPT_CLUSTER$, min: 1, max: 128No
zscaler_password_variableStringRegex: ^[^"~`$&+,]{1,255}$No
zscaler_partner_api_keyStringRegex: ^[0-9a-z]{1,12}$No
zscaler_partner_api_key_variableStringRegex: ^[^"~`$&+,]{1,255}$No

sdwan:
edge_feature_templates:
sig_credentials_templates:
- name: FT-CEDGE-SIG-CREDS-UMBRELLA-01
description: "Global Umbrella SIG Credentials"
umbrella_api_key: 7f33d6ee0d56402c83c503a669a80d22
umbrella_api_secret: $CRYPT_CLUSTER$5dYqYjx7vO3/77uFutA+Sg==$m0ROjLW4OiuqFNkDQUFwoSwjbFB3aYhTj2KL+/g2HKygHy/EgUInhDtHXCUuKrxq
umbrella_organization_id: 1234567