Configure automatic renewal of automation profiles and certificates

The auto-renew feature ensures that your certificate is automatically renewed before it expires to maintain uninterrupted service.

Configure auto-renew to an automation profile or a single certificate or bulk certificates, to automatically renew and install the certificate(s) on your server.

For accounts with Multi-year Plans, auto-renew also allows you to set the automatic renewal of your Multi-year Plan. For more information about these plans, see Multi-year Plans.

Configuring auto-renew means your website will always have a valid TLS/SSL certificate.

Benefits

  • Automatically renew the certificate 30 days before it expires.
  • Custom auto-renew schedule of your certificate before it expires.
  • Auto-replace a revoked or missing certificate.
  • Automatically renew the Multi-year Plan before it expires.

Auto-renew settings configured to an automation profile or a certificate will be effective immediately.

Configure auto-renew for automation profiles

  1. Go to Automation > Manage profiles.

  2. On the Manage automation profiles page, click Add new profile.

  3. Choose the type of host for this profile: ACME automation for dedicated endpoint devices or sensor automation for load balancers.

  4. On the Create an automation profile page, under the Certificate settings, select Auto-renew and install certificate.

    (Alternate) For accounts with Multi-year Plans, select Auto-renew certificate and Multi-year Plan to automatically renew the certificate and plan before expiration.

  5. Choose the appropriate option for auto-renewal.

  6. Click Save.

All the certificates that use this profile inherit the auto-renew schedule based on the profile configuration.

Update auto-renew settings for automation profiles

  1. Go to Automation > Manage profiles.

  2. On the Manage automation profiles page, find and click the name of the automation profile you want to update.

  3. On the Edit automation profile page, under the Certificate settings section, select Auto-renew and install certificate.

    (Alternate) For accounts with Multi-year Plans, select Auto-renew certificate and Multi-year Plan.

  4. Update the auto-renew settings.

    Note: To override the auto-renew settings of the scheduled automation associated with this profile, enable Update these preferences in scheduled automation events that use this profile.

  5. Click Save.

Updated auto-renew settings will be effective immediately, and the auto-renew schedule will start per updated settings.

If Update these preferences in scheduled automation events that use this profile is disabled, updated auto-renew settings will be applicable only after the next scheduled automation.

Configure auto-renew for certificates

  1. Go to Automation > Automated IPs.

  2. On the Automated IPs page, find the certificate you want to configure and automate.

  3. Choose the appropriate link in the action column corresponding to the certificate.

  4. On the Automated request page, select Auto-renew and install certificate.

    (Alternate) For accounts with Multi-year Plans, select Auto-renew certificate and Multi-year Plan.

  5. Choose the appropriate option for auto-renewal.

  6. Click I agree to the Certificate Services Agreement.

  7. Click Schedule Automation.

Update auto-renew settings for certificates

  1. Go to Automation > Automated IPs.

  2. On the Automated IPs page, find the certificate with Status: Auto renew scheduled.

  3. In the Automation status column, click the status link.

    An automation request pane opens.

  4. In the Automation Schedule section, click Edit settings.

  5. Update the auto-renew settings.

  6. Click Save.

Auto-renew settings configured to the certificate overrides the profile configuration it is associated with.

Updated certificate auto-renew settings will only be effective from the next schedule automation.

Configure auto-renew for bulk certificates

Use an automation profile to configure auto-renew for bulk certificates.

  1. Go to Automation > Automated IPs.

  2. On the Automated IPs page, select the certificates you want to configure and automate.

  3. Click Reissue.

  4. On the Bulk reissue page, under the Select profile section, select the automation profile from the drop-down.

  5. Click I agree to the Certificate Services Agreement.

  6. Click Schedule Automation.

All the selected certificates will be auto renewed based on the profile configuration.

For accounts with Multi-year Plans, all selected certificates will be issued corresponding to their Multi-year Plan. If the coverage of the plan is shorter and does not allow you to request a certificate, update the profile to extend the validity of the plan.