Manual flow for certificate requests
Certificate renewal requests and incidents are automatically created when certificates are about to expire or have expired. For added flexibility and control, you can also manually create requests using the Service Catalog.
A scheduled job examines the Unique Certificates [cmdb_ci_certificate] table on a daily basis and triggers renewal certificate tasks when a certificate is either expired or nearing expiration.
Things to consider for renewal of certificates:
- Tasks for certificate renewals are automatically generated 60 days prior to
expiration. To modify the timeframe, update the Discovery property:
glide.discovery.certs.days_before_expiration_to_create_renewal_task.Remarque :It's enough to configure the glide.discovery.certs.days_before_expiration_to_create_renewal_task system property for the automatic creation of manual certificate tasks. You don’t need to custom configure the CertificateNotifier or other prefilters.
- Certificate tasks are automatically assigned a Priority 3 - Moderate. Modify the priority by opening the task if necessary.
- If a certificate task already exists for the current certificate, no additional tasks are created.
- For renewal certificate tasks and incidents, various fields are automatically
pre-populated based on the certificate CI.Remarque :The fields assigned_to and requested_for in the renewal task are derived from the assigned_to field in the targeted certificate. Additionally, the assignment_group is carried over from the certificate to the renewal task.
- If a certificate expires and isn't replaced, a new incident is created. However, only one incident is generated for each expired certificate.
- To view the certificate incidents list, navigate to .