> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Venafi connection

> Learn how to configure a Venafi TLS Protect Cloud Connection for Infisical.

Connect Infisical to Venafi TLS Protect Cloud to use Venafi as an external CA for signing internal intermediate certificate authorities.

## Prerequisites

* A [Venafi TLS Protect Cloud](https://venafi.com/) account
* An API key generated from your Venafi TLS Protect Cloud dashboard

## Connection setup

**1. Navigate to App Connections**

In Certificate Manager, navigate to the **App Connections** tab on the **Settings** page.

![App Connections Tab](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/general/add-connection.png)

**2. Add Connection**

Select the **Venafi TLS Protect Cloud** option from the connection options modal.

**3. Configure Connection Details**

Configure the following fields:

* **Name**: A friendly name for this Venafi connection (e.g., "Production Venafi")
* **Method**: The authentication method. Currently only **API Key** is supported.
* **Region**: The region of your Venafi TLS Protect Cloud instance. Supported regions:
  * US (United States)
  * EU (Europe)
  * AU (Australia)
  * UK (United Kingdom)
  * SG (Singapore)
  * CA (Canada)
* **API Key**: The API key from your Venafi TLS Protect Cloud dashboard

Click **Connect to Venafi** to validate your credentials and create the connection.

> [!NOTE]
>
> Infisical validates the API key by connecting to the Venafi TLS Protect Cloud API during connection creation.
> If the validation fails, check that your API key is correct and that you have selected the right region.

**4. Connection Created**

Your **Venafi Connection** is now available for use with internal intermediate CAs in your Infisical projects.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.