Overview: Certificate Issuance
Table of Contents
Expand all | Collapse all
-
- Activate Next-Generation Trust Security
-
-
- Configure Akamai Connection
- Configure AWS Connection
- Configure Azure Key Vault Connection
-
- Workload Identity Federation Authentication
- Workload Identity Federation - Azure Identity Provider Authentication
- Next-Gen Trust Security Generated Key Authentication
- User Permissions
- Workload Identity Federation Authentication
- Next-Gen Trust Security Generated Key Authentication
- User Permissions
- Supported OIDC Claims
-
-
-
- Add AWS Public CA
- Add AWS Private CA
- Add DigiCert One Certificate Authority
- Add Entrust
- Add GlobalSign Atlas
- Add GlobalSign MSSL
- Add GoDaddy
- Add Google CAS (GCAS)
- Add a HID PKIaaS CA
- Add Certificate Manager - Self-Hosted
- Set Up an OpenSSL Certificate Authority Connector
- Create a Sectigo Certificate Manager Certificate Authority
- Add SSL.com
- Add Zero Touch PKI
-
- Example: Create a Custom CA Connector Using the CA Connector Framework
- Creating an Entrust CA Gateway Connector
- Creating a HashiCorp Vault CA Connector
- Creating a SecureW2 Connector
- Creating a SwissSign Connector
- Creating a Tucows OpenSRS Connector
- Working with Custom CA Connectors in the Certificate Authorities Inventory
- Set Up Certificate Expiration Notifications
- Using a Custom DNS Provider
- CNAME Delegation for Domain Validation
- About Authorized Domains
-
- Getting Started with Next-Gen CA
- Adding Root CAs
- Adding Issuing CAs
- Agentic Plugins for Next-Gen CA
- Downloading Root CA Certificates
- Decommissioning CAs
- Viewing Your PKI
- Viewing CA Details
- CA Configuration Limits
- Default CAs by Configuration Tier
- About the PKI Hierarchy
- About Configuration Tiers
- About Certificate Issuance and Revocation
- About Post-Quantum Certificates
- About Subordinate CA Providers
- Add Subordinate CA Providers
- About Issuer Configurations
- Issuer Certificates Page
-
-
- 47-Day Validity Readiness TLS Certificates
- About the Certificate Inventory
- Managing Certificate Lifecycle Settings
- Reissuing Certificates in Next-Gen Trust Security
- Duplicating DigiCert Certificates
- Downloading Certificates, Certificate Chains, and Keystores
- Retiring, Recovering, and Deleting Certificates
- Finding Certificates in the Certificate Inventory
- Importing Certificates from DigiCert
- Importing Certificates from EJBCA
- Importing Certificates from GlobalSign Atlas
- Importing Certificates from GlobalSign MSSL
-
- Create a Workload Identity Management or Discovery Agent Built-in Account
- Create an OCI Registry Built-in Account
- Create a Certificate Manager - Self-Hosted Built-in Account
- Create a Scanafi Built-in Account
- Toggling a Built-in Account On or Off
- Editing Built-in Accounts
- Deleting Existing Built-in Accounts
- Renew Existing Built-in Accounts
- Licensing PKI
- Troubleshooting
Overview: Certificate Issuance
Next-Gen Trust Security streamlines certificate issuance and renewal through a centralized, policy-driven workflow designed for network security administrators.
By using a guided UI and predefined policies, Next-Gen Trust Security helps ensure certificates are issued consistently, securely, and in compliance with organizational standards.
Features and Benefits
- Centralized certificate issuance: Manage certificate requests and renewals from a single interface, improving visibility and control.
- Support for multiple certificate authorities: Issue certificates from public and private CAs based on policy and use case.
- Policy-driven issuance: Enforce naming, validity, and usage requirements during certificate issuance.
- Scalable certificate management: Handle growing certificate volumes without manual intervention.
Audience and Use Cases
This capability is intended for network security administrators responsible for managing certificates across infrastructure. It supports organizations that need consistent, policy-compliant certificate issuance at scale.
Requirements and Compatibility
The following components must already be configured:
- Certificate authorities: Certificate Authorities must be configured and available in Next-Gen Trust Security.
- Request policies: Request policies define how certificates are requested and issued.
- Certificate inventory: Issued certificates are tracked and managed through the certificate inventory.
Next Steps
To begin issuing certificates, configure your Certificate Authorities and request policies, then submit certificate requests using the Next-Gen Trust Security interface.