Advanced TLS/SSL certificate lifecycle automation
CertCentral automation is designed to be flexible and scalable.
Tip
If you manage just 1 or 2 TLS/SSL certificates or if you are new to certificate automation, try our guided TLS/SSL certificate lifecycle automation solution.
General information
For general information about the automation service:
Deployment options
How do you want to automate your certificate management?
CertCentral managed automation
Notice
Retiring Managed Automation in CertCentral
On October 1, 2026, DigiCert will retire the Managed Automation service in CertCentral. To continue using managed automation after this date, use DigiCert® Trust Lifecycle Manager.
A Trust Lifecycle Manager Advanced subscription is required for managed automation.
Learn about moving Managed Automation to Trust Lifecycle Manager
Note: API and ACME automation are still supported in CertCentral.
To learn about the CertCentral managed automation solution:
Choose this option for:
Scalable and centralized management in CertCentral.
Easy installation and configuration with built-in ACME client.
Automatic ACME client software updates.
Flexibility to use with custom applications.
Automation profiles and policy management.
Automatic renewal at the end of the validity period.
Automatic validation that certificate was received and installed.
API integration.
Use a third-party ACME client
To learn about using a third-party ACME client for automation of DigiCert certificates:
Choose this option for:
Your own ACME client such as Certbot already installed and configured.
Limited deployment scale that allows you to manage all your endpoints one-by-one.
Automation actions initiated locally on each certificate host.
Ability to automate certificates from the local command-line interface (CLI).
Important
If you need help or to report errors related to CertCentral managed automation, contact Support.