- Overview
- Reference Guide
- Setup & Architecture
- Release Notes
- Workflow
- API Reference
- Integration Guide
- Discovery Agent Setup Guide
v3.3.1 Release Notes
Release date: 3 August 2026
New Features
The v3.3.1 release of Encryption Consulting CertSecure Manager adds the following features:
Certificate Management
- Certificate Audit Trail: Every certificate keeps a complete history of who requested, approved, denied, revoked, and owns it. The full audit trail is viewable from the certificate with a single click, supporting accountability and compliance reviews.
- Custom Fields: Define organization-specific metadata fields (for example, project or sub-project) as text, number, date, or a fixed list of values. Values can be set on individual certificates or bulk-assigned, so custom data is tracked alongside built-in certificate attributes.
- Certificate Import Without PEM: Register a certificate in inventory using its details (Common Name, serial number, and expiry date) when the PEM is not available, so tracking and expiry monitoring are no longer blocked by missing certificate files.
Certificate Discovery
- Targeted Windows Scans (OU and Server Filters): Windows certificate-store discovery scans accept OU and server inclusion and exclusion filters selected directly from the UI, limiting each scan to the intended part of the Active Directory environment.
- Scan Ownership: Each discovery scan can be assigned an owner, making responsibility for the scan and its results explicit.
- Per-Scan Expiry Alerts: Expiry notifications can be enabled per discovery scan, with a configurable lead time that controls how far ahead of expiry alerts are sent.
- Automatic Post-Scan Report: After each successful run, a scan can optionally email a CSV of the certificates it discovered to the scan's owner.
- Bulk Scan Configuration: Ownership, expiry alert, and post-scan report settings can be applied to multiple discovery scans in a single action.
- Customizable Discovery Inventory: Users choose which columns appear in the Discovery inventory table, tailoring the view to the attributes they work with.
Authentication and User Security
- Self-Service Password Change and 2FA: Users can change their password at any time from the Profile section. Users can also set up two-factor authentication with TOTP authenticator apps such as Google Authenticator and Microsoft Authenticator.
- Okta SAML Authentication: CertSecure Manager integrates with Okta for SAML-based single sign-on, allowing organizations to enforce MFA through their Okta policies.
Enhancements and Bug Fixes
The v3.3.1 release of Encryption Consulting CertSecure Manager includes the following enhancements and bug fixes:
- Certificate Authorities (Sectigo SCM): Fixed a bug that caused certificate enrollment failures through the Sectigo Certificate Manager (SCM) integration.
- Certificate Authorities / Alerts: CDP and AIA outage alerts are now configurable per CA under the Certificate Authorities section, instead of using fixed notification behavior.
- Settings (Email / SMTP): SMTP configuration is more flexible: authentication is now optional (supporting passwordless relays), TLS/STARTTLS is configurable, and credential validation has been improved.