Focus

Next-Gen Trust Security

Discover Certificates in Cloud Keystores

Table of Contents

Discover Certificates in Cloud Keystores

Next-Gen Trust Security can discover certificates stored in supported cloud keystores. Discovery allows you to import certificate metadata into the platform, monitor certificate status, and apply governance policies consistently across environments.

Note: Cloud keystore discovery configuration is a parent TSG resource. Only users with the Superuser role in the parent TSG can create, configure, or manage cloud provider connections and keystore discovery. Discovered certificates are initially unowned and can be claimed by users in any TSG.

Cloud keystore discovery is typically performed after:

A cloud provider connection has been configured
One or more cloud keystores have been added

You can run discovery immediately to retrieve certificates from the keystore, or configure a recurring schedule to ensure newly created or updated certificates are detected automatically.

When to Run Discovery

You may want to initiate discovery:

After configuring a new cloud keystore
When onboarding an existing environment
To verify connectivity and permissions
To import certificates that were created outside of Next-Gen Trust Security
To include expired certificates for historical visibility

Supported Cloud Platforms

Certificate discovery is supported for the following cloud keystore providers:

Each platform requires its respective cloud provider connection to be configured before discovery can be initiated.

Discover Certificates on Machines

Discover Certificates on Azure Key Vault