Automate certificate renewal
Configure automated renewal through automation profiles to renew and install certificates before expiration without manual intervention. Automated renewal applies to all certificates associated with the profile.
Before you begin
Auto-renewal requires an account balance as the default payment method. Credit card payment is not supported for automated renewal. See Set up account credit.
For Multi-year Plans, auto-renewal ensures both the certificate and the plan are renewed before expiring. This applies to Enterprise and Partner accounts only.
Domain and organization validation must be current for automated renewal to complete without interruption.
Enable automated renewal in an automation profile
In the CertCentral main menu, go to Automation > Manage profiles.
Select Add new profile, or select an existing profile to edit.
In Certificate settings, enable Auto-renew and install certificate.
Select a renewal schedule, or use the default renewal timing.
Select Save.
Certificates associated with the automation profile inherit these renewal settings.
Update renewal settings for an existing profile
In the CertCentral main menu, go to Automation > Manage profiles.
Select the profile you want to update.
In Certificate settings, update Auto-renew and install certificate.
Select Update these preferences in scheduled automation events that use this profile.
Select Save.
Renewal setting changes apply to certificates associated with the profile.
Renewal behavior
Automated renewal proceeds when all of the following conditions are met:
The certificate is eligible for renewal
Domain control validation (DCV) requirements are satisfied
Organization validation is complete when applicable
Account approval settings allow automated issuance
For Authkey-enabled accounts: DV certificate renewal requests are approved and issued immediately.
For non-Authkey accounts: DV renewal requests move to Approval pending status until DCV is complete.
For standard plans: CertCentral renews the certificate when it is within the renewal window.
For Multi-year Plans: CertCentral reissues the certificate to use remaining plan coverage rather than renewing the order.
When renewal does not complete, verify the following:
The certificate remains associated with an automation profile
Validation requirements are satisfied
Approval settings allow automated renewal
The account balance is sufficient to process the renewal
What's next
Configure automatic renewal notifications to alert users before a certificate expires when automated renewal is disabled or delayed