Configure automatic renewal of certificates
The auto-renew feature ensures that your certificates are automatically renewed before they expire to maintain uninterrupted service.
Configure auto-renew to an automation profile or an individual certificate or bulk certificates, to automatically renew and install the certificates on your systems.
Benefits
Ensure your website will always have a valid TLS/SSL certificate.
Automatically renew certificates 30 days before they expire or on a custom schedule.
Auto-replace revoked or missing certificates.
Notice
For accounts with Multi-year Plans, auto-renew also allows you to set the automatic renewal of your Multi-year Plan. For more information about these plans, see Multi-year Plans.
Configure auto-renew in new automation profiles
In your CertCentral account, in the left main menu, go to Automation > Manage profiles.
On the Manage automation profiles page, select Add new profile.
On the Create an automation profile page, select the profile type to create:
Create agent profile to create a profile for ACME agent-based automations on standard hosts.
Create sensor profile to create a profile for sensor-based automations on network appliances.
Under the Certificate settings section, select Auto-renew and install certificate.
(Alternate) For accounts with Multi-year Plans, select Auto-renew certificate and Multi-year Plan to automatically renew the certificate and plan before expiration.
Choose the appropriate option for auto-renewal.
Select Save.
Note
All the certificates that use this profile will inherit the auto-renew schedule based on the profile configuration.
Update auto-renew settings in automation profiles
In your CertCentral account, in the left main menu, go to Automation > Manage profiles.
On the Manage automation profiles page, find and click the name of the automation profile you want to update.
On the Edit automation profile page, under the Certificate settings section, select Auto-renew and install certificate.
(Alternate) For accounts with Multi-year Plans, select Auto-renew certificate and Multi-year Plan.
Update the auto-renew settings.
Note: To override the auto-renew settings of any scheduled automations associated with this profile, select Update these preferences in scheduled automation events that use this profile.
Select Save.
Note
If you select Update these preferences in scheduled automation events that use this profile, updated auto-renew settings will be effective immediately. The auto-renew schedule will start per updated settings.
If you do not select this setting, updated auto-renew settings will be applicable only after the next scheduled automation.
Configure auto-renew for individual certificates
In your CertCentral account, in the left main menu, go to Automation > Automated IPs.
On the Automated IPs page, find the certificate you want to configure and automate.
Choose the appropriate link in the action column corresponding to the certificate.
On the Automated request page, select Auto-renew and install certificate.
(Alternate) For accounts with Multi-year Plans, select Auto-renew certificate and Multi-year Plan.
Choose the appropriate option for auto-renewal.
Select I agree to the Certificate Services Agreement.
Select Schedule Automation.
Note
Auto-renew settings configured to the certificate override the profile configuration it is associated with.
Update auto-renew settings for individual certificates
In your CertCentral account, in the left main menu, go to Automation > Automated IPs.
On the Automated IPs page, find the certificate with Status: Auto renew scheduled.
In the Automation status column, select the status link.
An automation request pane opens.
In the Automation Schedule section, select Edit settings.
Update the auto-renew settings.
Select Save.
Note
Updated certificate auto-renew settings will only be effective from the next schedule automation.
Configure auto-renew for bulk certificates
Use an automation profile to configure auto-renew for bulk certificates:
In your CertCentral account, in the left main menu, go to Automation > Automated IPs.
On the Automated IPs page, select the certificates you want to configure and automate.
Select Reissue.
On the Bulk reissue page, under the Select profile section, select the automation profile from the drop-down.
Select I agree to the Certificate Services Agreement.
Select Schedule Automation.
Note
All selected certificates will be auto renewed based on the profile configuration.
For accounts with Multi-year Plans, the certificates will be issued corresponding to their Multi-year Plan. If the plan's coverage is shorter and does not allow you to request a certificate, update the profile to extend the plan's validity.