Create automation profiles

An automation profile is a template for TLS/SSL certificate deployment. A profile defines certificate properties, such as product type and validity, so you can maintain TLS/SSL uniformity across your environment.

When you schedule an automation event, you choose a profile. The ACME agent or sensor then requests and installs a certificate with those predetermined settings. You can define multiple profiles and choose the right one depending on the situation.

Before you begin

  • Identify common properties of certificates in your environment:
    • The host device as a dedicated endpoint or a load balancer
    • Certificate type
    • Validity period
    • Coverage length of Multi-year Plans (Applicable only for accounts with Multi-year Plans.)
    • The division that manages or owns the device and its certificate
    • The organization most commonly associated with the device and its certificate
  • Do you want this set of certificate properties to be the default profile? If you make it the default, you and other requesters can still choose a different profile, as needed, when scheduling automation.
  • Do you want the associated certificate and Multi-year Plan to be automatically renewed? If yes, the auto-renew feature ensures your certificate and Multi-Year Plan are automatically renewed before expiring to maintain uninterrupted service. For more information about these plans, see Multi-year Plans.

Create an automation profile

  1. In your CertCentral account, in the left main menu, go to Automation > Manage profiles.

  2. On the Manage automation profiles page, select Add new profile.

  3. On the Create an automation profile page, select the profile type to create:

    • Create agent profile to create a profile for ACME agent-based automations on standard hosts.
    • Create sensor profile to create a profile for sensor-based automations on network appliances.
  4. Specify the certificate properties you identified above.

  5. Select Save.