Manage service users and API credentials
An API key has the permissions and scope of the standard user or service user that owns it. For each integration:
Create a dedicated service user.
Assign only the required Account Manager and product roles.
Generate only the credentials the integration requires.
Store credentials in an approved secrets-management system.
Monitor expiration dates and replace credentials before they expire.
Revoke credentials immediately if they may have been exposed.
Disable or delete credentials when the integration is retired.
DigiCert limits new cryptographic configurations to the algorithms and key strengths available in the FedRAMP deployment.