- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
Renewal Manager Guide
The Renewal Manager is an agent service that works with CertSecure Manager to automate and manage SSL/TLS certificate renewals for web servers (IIS, Apache, Nginx, Tomcat) and databases (MSSQL, MongoDB, OracleDB) running on Windows and Linux environments. Once it is deployed, the Renewal Manager renews certificates on your target servers end to end, from generating the Certificate Signing Request (CSR) on the target to installing the renewed certificate and restarting the service where required. The private key is created on the target server and never leaves it.
The Renewal Manager can also renew certificates on Cloudflare, AudioCodes session border controllers, Cisco ISE, Cisco ACI, and Palo Alto PAN-OS firewalls and Panorama, through their management interfaces.
This guide is divided into four parts. We recommend reading the Workflow first to understand how a renewal works, and then following the Setup to deploy the Renewal Manager in your environment.
- Workflow – explains the end-to-end renewal process and the data flow between the CertSecure Backend, the Renewal Manager Agent, and the target server, from polling for renewal tasks to installing the renewed certificate and reporting the result back to CertSecure Manager.
- Setup – covers the prerequisites for the Renewal Manager host and the target servers, including supported targets, hardware and software requirements, remote access, and account permissions, followed by the steps to install, register, and validate the Renewal Manager.
- Troubleshooting – what to check for installation, connectivity, and renewal errors, and where to find the agent log.
- Integrations – one page for each supported target ( IIS, Apache, Tomcat, Nginx, MSSQL, MongoDB, Oracle, Cloudflare, AudioCodes, Cisco ISE, Palo Alto PAN-OS, and Cisco ACI), covering how to add a server and its endpoints, renew a certificate, and view the renewal tasks.