Venafi CLM flip

Prerequisites#

• Tenant integration clm-venafi with API credentials
• writeBackEnabled: true for install step
• PQC-capable certificate policy template in Venafi
• CRYPTO_FLIP_ENABLED and cryptoFlip.clm tenant flags

Flip steps#

POST dry-run then submit with provider: venafi, flipSurface: clm. Poll until request status is issued; trigger verify scan on target FQDN.