Skip to main content

Create enrollments

Before you can enroll certificates, you need at least one certificate profile in your account. The certificate profile is where you define the properties of the certificates, including the allowed enrollment and authentication methods.

Options for enrolling new certificates from a profile include:

  • Use the admin web request function to request new certificates with delivery to one or more external key vaults.

  • Use the enroll seats function to request new certificates from a profile using the Enrollment Code authentication method.

  • Create a certificate profile with the Manual Approval authentication method to generate an enrollment URL. Distribute this link to your users to allow them to request their own certificates from that profile.

  • Enroll via certificate lifecycle automation tools, including managed automation and third-party ACME clients.

  • Submit with the API. Go to Resources > API reference to learn about the available endpoints in the Enrollments API controller.

Pending enrollments that use the Enrollment Code or Manual Approval authentication method can be tracked and managed from the Enrollments page in DigiCert​​®​​ Trust Lifecycle Manager. Other enrollment types get authenticated and approved as part of the initial request.