Identify the associated CI for a certificate

[Madhu5]

Hi All,

I have a requirement where I need to fetch the owner of the server on which the certificate is present. Please let me know if there is any field or table where i can get the information from.

The actual requirement is to send email notifications 90/60/30 days prior to the certificate expiry date to the server spoc. Please let me know any best way to do this.

[Angela Cruden · Accepted solution]

Hi,

Given that a Unique Certificate can be installed on many different servers (Installed Certificates) you could have many different server SPOC’s for the one certificate if you were using that as the basis of expiry reminders.  Typically I’d target the team/person responsible for actually renewing the certificate rather than the server SPOC and nominate this person as the ‘Change Group’ or ‘Assigned To’ on the unique certificate.  The reminder notifications can then be sent to this team/person.

The server SPOC’s can then be added as part of generating the change request to install the renewed certificate on each server – they could be assigned a change task each.  I’d build this into the flow that handles the renewal – you should be able to dot walk or script within the flow to get the list of server SPOC’s to assign them a change task.

[Ram Devanathan1]

with the certificate management app, these are automatically discovered as part of server discovery. there's cert expiry warnings built as part of workflow too.