Assign scripts to an agent
To start using your own scripts to customize agent-based automations, you need to assign the scripts to the applicable agents in DigiCert® Trust Lifecycle Manager.
Hinweis
This page describes how to assign SNI information or pre/post-scripts for a single agent. To bulk assign these script types to multiple agents at once, see Bulk assign scripts to multiple agents.
To learn about the use of custom automation scripts with your agents, see Einrichten einer benutzerdefinierten Anwendung für Managed Automation.
Before you begin
Before assigning any script type to your DigiCert agents:
Add each script in Trust Lifecycle Manager to verify and make it available for assignment. For new scripts, each agent must have software version
3.1.2or above. For details, see Add and manage scripts.For legacy scripts that were added before August 13, 2025, each agent must have a software version of at least
3.0.8and no later than3.1.1. For details, see Legacy agent scripts.
Verify scripts in agent details
To verify current script assignments for a DigiCert agent in Trust Lifecycle Manager:
From the Trust Lifecycle Manager menu, go to Discovery & automation tools > Agents.
Select any agent by name to view the details for it.
Select the Automation options tab.
Any currently configured scripts for the agent are shown in the following sections:
Section
Description
Server Name Information (SNI)
If SNI is enabled for the agent, this section shows whether the SNI domains are entered manually or learned dynamically via an SNI information script.
Pre/post-install scripts
Shows any pre- or post- scripts assigned to the agent, per web server application.
Hinweis
To verify custom automation scripts, check the IP/port targets tab to see any endpoints on the agent that are managed through custom scripts.
Assign an SNI information script
To assign an SNI information script to a DigiCert agent so it can learn SNI domains dynamically:
From the Trust Lifecycle Manager menu, go to Discovery & automation tools > Agents.
Select the agent by name to view the details for it.
On the details page, select the pencil icon on the right to edit the agent configuration.
In the Server Name Indication (SNI) section:
Make sure SNI is enabled. If not, toggle it On.
Select the option to configure SNI domains through a Server-side script.
Select the name of the script to use from the dropdown list.
Select the Update button at bottom to save your changes.
Wichtig
After updating the SNI configuration, run the Refresh configuration action on the agent to force activation of the SNI FQDN and discover any existing SNI certificates for them. Otherwise, the updated SNI FQDN won't become active until the agent runs its daily refresh operation.
Assign pre- or post-scripts
To assign pre- or post-installation or post-delivery scripts to a DigiCert agent to execute during certificate automation events:
From the Trust Lifecycle Manager menu, go to Discovery & automation tools > Agents.
Select the agent by name to view the details for it.
On the details page, select the pencil icon on the right to edit the agent configuration.
In the Pre/post-install scripts section:
To run a script after delivering a certificate, select Admin web request. Use the dropdown to select the specific Post-delivery script to run after a certificate gets delivered to the host system via the admin web request enrollment method.
To run a script before or after installing a certificate, select the applicable web server application. Use the dropdowns to select the specific Pre-installation script and/or Post-installation script you want to run when installing a certificate for that application.
Select the Update button at the bottom to save your changes.
What's next
Any pre/post-scripts you assigned to the agent will run during the next and subsequent certificate automation events.
You can override pre/post-scripts on a one-time basis when scheduling an automation event in Trust Lifecycle Manager.