Renew certificates in batches
Use Renew batch job to renew certificates in bulk from a completed batch enrollment job. This approach helps you maintain certificate continuity across large device fleets without renewing certificates individually.
Depending on your certificate management policy, you can renew certificates by reusing existing keys or by replacing keys with new CSRs. You can renew all eligible certificates in a batch or select specific certificates to renew.
When you start a renewal job, DigiCert® Device Trust Manager processes the request asynchronously and provides real-time status updates. During processing, Device Trust Manager automatically skips devices that don't meet the renewal criteria and generates a summary that identifies Renewed, Skipped, and Failed certificates. This summary helps you review the outcome of the renewal operation and identify any devices that require additional attention.
How certificate profile renewal settings affect batch renewals
Use the following information as context before creating a batch renewal job.
The renewal methods available for a batch renewal depend on the Renewal settings configured in the Certificate profile used to issue the original certificates. You can review the renewal configuration for a certificate profile by navigating to: Certificate management > Certificate settings > Certificate profiles > Renewal settings.
Device Trust Manager inherits renewal behavior from the certificate profile's Renewal settings, specifically the New keypair required for renewal settings. This setting determines whether certificates can be renewed by reusing an existing key pair or whether a new key pair is required.
Before you begin
Before you renew certificates from a batch enrollment job, ensure:
The source batch certificate enrollment job is in the Completed state
You are a Solution administrator who can issue certificates and run batch jobs in Device Trust Manager
If you plan to renew certificates with new keys, generate the required CSRs and prepare them according to the supported file format requirements
These prerequisites apply to all batch renewal methods, including renewing with existing keys, renewing with new keys, and selectively renewing certificates from a completed batch job.