1
Certificate discovery and registration
Scan and manage certificates deployed across your network
· Discover SSL certificates installed on web servers and load balancers
· Discover and display certificates from all vendors (CN, issuing CA, issue date, expiration date)
- Discover private CAs / public CAs
2
Automatic renewal & deployment (Auto Renewal & Deployment)
1) Automatically renew certificates approaching expiration
· Initial certificate: Requires admin request or registration
· Renewal certificate: Automatically renew via KCM after checking the expiration date
- Configurable renewal schedule (e.g., 10 days before expiry)
· Optional workflow: Renew after intermediate administrator approval upon request
· Validation methods
① Email: manual validation
② DNS (CNAME / DNS TXT): manual validation
③ HTTP validation: automated validation for issuance
3
Automatic renewal & deployment (Auto Renewal & Deployment)
2) Automatically deploy issued certificates to servers
· After checking certificate status, automatically deploy issued certificates to registered servers
· Register deployment servers in KCM and map servers to certificates
① Upload certificates to a temporary path on the target server
② Apply certificate: replace with the newly issued certificate
③ Certificate rollback: if installation errors occur (connection error or fingerprint mismatch), keep the previous SSL certificate
· Deployable servers: Apache, NginX, WebtoB, IIS, Tomcat, Weblogic, Jboss
4
Notification & record (Notification & Record)
Alerts for certificate expiration and deployment status
· Support Email, Slack, and REST
· Notification policy settings: certificate expiration, issuance status, auto-renewal, deployment server status
· Configure sender email via SMTP
· Support bulk recipient registration (with CC capability)
5
Revocations & replacements (Revocations & Replacements)
Revoke and reissue issued certificates
· Provide certificate revocation when a certificate is not in use
· Provide certificate reissue when domains change