- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
v3.1.0 Release Notes
Release date: June 2025
New Features
The June 2025 release delivers enhancements across core certificate lifecycle management capabilities, focusing on automation to meet the 47-day certificate validity requirements mandated by the CA/Browser Forum, multi-platform compatibility, and security integration.
Key areas of improvement include cross-platform certificate discovery and renewal agents, expanded public CA integrations (DigiCert, Sectigo and GlobalSign), advanced alerting and reporting with ownership tracking, seamless SIEM integration with Splunk and Azure Key Vault, and automation support through Ansible and CLI interfaces. The platform now offers an enhanced user experience through UI improvements and policy-driven security controls.
Certificate Discovery
- Added certificate store discovery for Linux and Windows environments.
- Added advanced analytics and scheduling with certificate discovery module.
Security and SIEM Integration
- Integrated Splunk for centralized log analysis and event monitoring.
- Enabled secure key and certificate storage using Azure Key Vault.
Automation Support
- Integrated with Ansible for automated CLM operations.
- Added CLI interface for managing Java KeyStore (JKS).
CA Integrations
- Integrated DigiCert Public CA, GlobalSign Public CA and Sectigo Public CA for CLM operations.
Renewal Agents
- Added Renew/Renew and Apply options for F5 Renewal agent.
- Integrated NGINX renewal agent for Linux and Windows environments.
- Integrated automation support for Database Servers certificate renewal: MongoDB, Microsoft SQL, and Oracle Database Servers.
User Management
- Enabled ownership transfer for the user on deregistration.
Template and Alert Management
- Enabled alert mapping specific to certificate templates.
- Added feature to configure alerting based on days before expiry or renewal.
- Added configurable interval options for alerts.
API and Utilities
- Introduced a utility to manage and rotate API tokens on custom validity periods.
- New API introduced to map task ID to certificate enrollment identifier (EID).
Connector & UI Enhancements
- Enabled UI and backend connector enhancements for improved performance.
- Added 'Remember Me' functionality on the login page.
Service-based Architecture
- Enabled the CertSecure Manager backend and frontend to run as a Windows or Linux based service.
Reporting Enhancements
- Reports now include certificate owners and watchers.
- SAN (Subject Alternative Name) attributes shown in reports.
- Owner and watcher list added in Inventory report.
Policy and Compatibility
- Enabled configuration of short DNS names via policy settings and support for SHA 3DES legacy algorithm.
- Introduced password generator based on admin-defined policies.