Discover unmanaged certificates in cloud environments
Use Discovery to scan cloud environments and network endpoints to locate certificates installed on servers, applications, and services. Discovery sensors scan configured hosts, ports, and fully qualified domain names to identify certificates and associated deployment details.
What Discovery identifies
Discovery provides the following information for each certificate found:
Common Name
Expiration date
Issuing certificate authority
Server host and endpoint
Associated ports and IP addresses
This visibility allows administrators to locate certificates not yet managed through CertCentral automation regardless of which certificate authority issued them.
Configure a Discovery scan
In the CertCentral main menu, go to Discovery > Manage scans.
Select Add scan.
Enter a name for the scan.
Select the sensor to use for the scan.
Configure the scan targets:
Enter the IP addresses, hostnames, or FQDNs to scan
Configure the ports to scan
Set the scan schedule: run once or on a recurring schedule.
Select Save and run.
Review scan results
In the CertCentral main menu, go to Discovery > View results.
Review the certificates identified in the scan.
Filter results by expiration date, issuing CA, or host to prioritize certificates for automation.
Notice
Discovery identifies certificates issued by any certificate authority and is not limited to only DigiCert certificates. Use the issuing CA filter to identify third-party certificates that may need to be replaced with DigiCert certificates before automation can be applied.
What's next
Analyze certificate inventory to improve automation coverage to determine which discovered certificates to prioritize for automation profiles