Manage certificate templates
Manage certificate templates throughout their lifecycle by viewing, modifying, enabling/disabling, and deleting the existing templates.
Use this section to maintain certificate templates as your security and operational requirements evolve.
To perform this action, you must have a user role that contains the Solution administrator permission.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
Select the Name of a certificate template to view its details:
General information: The General information section provides administrative and operational details about the certificate template. Use this information to review the template's name, status, certifiate type, and format of the certificate template
Template body: The Template body section displays the certificate template configuration that defines how certificates are issued. Use this information to review the template's certificate types, supported signature algorithms and key types, subject attributes, extensions, validity settings, and renewal behavior
Assigned accounts: The Assigned accounts section shows which DigiCert ONE accounts can access and use the certificate template. Use this information to determine whether the template is available to all accounts or restricted to specific accounts, and to review the accounts that have permission to issue certificates from the template
To perform this action, you must have a user role that contains the Solution administrator permission.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
Locate the Certificate template you want to update from the Certificate templates table.
Select More actions > Edit.
Update the following as per your requirement:
Template name: The name of the certificate template
Format: Select the Certificate format from the available options. Device Trust Manager supports X.509, Global platform, and Attribute certificate template formats
Template body: Update the template body as required; paste or enter the JSON definitions for the certificate template you are updating
Limited accounts: Determine whether the template is available to all accounts or restricted to specific accounts, and update accordingly
When you're ready, select Update.
The modified certificate template is listed under Certificate management > Cerificate settings > Certificate templates table.
To perform this action, you must have a user role that contains the Solution administrator permission.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
Locate the Certificate template you want to clone from the Certificate templates table.
Select More actions > Clone.
Provide a unique name for the certificate template you are cloning.
Update the following as per your requirement:
Template name: The name of the certificate template
Format: Select the Certificate format from the available options. Device Trust Manager supports X.509, Global platform, and Attribute certificate template formats
Template body: Update the template body as required; paste or enter the JSON definitions for the certificate template you are updating
Limited accounts: Determine whether the template is available to all accounts or restricted to specific accounts, and update accordingly
When you're ready, select Clone.
The cloned certificate template will now appear under Certificate management > Cerificate settings > Certificate templates table.
To perform this action, you must have a user role that contains the Solution administrator permission.
If a certificate template is no longer needed but may be needed again, you can disable it. Disabling a certificate template removes it from drop-downs on forms where template data is required, such as creating a certificate profile.
Belangrijk
Disabling a certificate template does not affect certificate profiles or certificate management policies that rely on it. They will continue to work as expected.
To use a disabled certificate template again, enable it. After enabling a certificate template, it will appear on forms where template data is required, such as creating a certificate profile.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
Locate the Certificate template you want to disable from the Certificate templates table.
Select More actions > Disable.
When you return to the Certificate templates page, the Status of the certificate template is now Disabled. The template no longer appears on forms where certificate template data is required.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
On the Certificate templates page, in the Filter by column dropdown > Add rule, select Status from the drop-down menu.
In the Value field, choose Disabled.
The Certificate templates tab now displays only templates that are currently disabled.
Select More actions > Enable.
When you return to the Certificate templates page, the Status of the template is now Active. The certificate template will now appear on forms where certificate template data is required.
To perform this action, you must have a user role that contains the Solution administrator permission.
If a certificate template is no longer needed, you can delete it. Deleting a certificate template removes it from forms where template data is required, such as creating a certificate profile. It also removes it from the list of templates on the Certificate templates page.
Belangrijk
Deleting a certificate template does not affect certificate profiles or certificate management policies that rely on it. They will continue to work as expected.
If you end up needing to use a deleted certificate template again, you can restore it. After you restore a certificate template, it will appear on forms where certificate template data is required, such as creating a certificate profile. It also appears in the list of templates on the Certificate templates page.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
Locate the Certificate template you want to delete from the Certificate templates table.
Select More actions > Delete.
When you return to the Certificate templates page, the Status of the template changes to Deleted, and the template no longer appears on forms where certificate template data is required.
In the Device Trust Manager menu, go to Certificate management > Certificate settings.
The certificate templates available to your account are listed in a table format, under the Certificate templates tab.
On the Certificate templates page, in the Filter by column dropdown > Add rule, select Status from the drop-down menu.
In the Value field, choose Deleted.
The Certificate templates tab now displays only templates that are currently deleted.
Select More actions > Restore.
When you return to the Certificate templates page, the template is now Active and appears in the list of templates. The template will now appear on forms where certificate template data is required.