Add a Sectigo Certificate Manager CA Account

1. Sign in to Next-Gen Trust Security.
2. Click Configuration > Certificate Integrations > Certificate Authorities.
3. Click New, then click Add Certificate Authority Connector.
4. On the Connection page:
   1. Enter a Name that will be used as the display name for the CA account.
   2. Select Sectigo Certificate Manager as the Certificate Authority Type.
   3. Click Next.
5. On the Information page, provide the connection details for your Sectigo Certificate Manager account:
   1. In the Service Address field, enter the URL for your Sectigo Certificate Manager server.
      For example: hard.cert-manager.com If you have a custom URL associated with your account, you can enter it here. Do not include https:// in the URL.
   2. Enter your Customer URI.
      This is the last part of your Web Admin Console URL. For example, if your Web Admin Console were https://cert-manager.com/customer/MyCompany, your Customer URI would be MyCompany.
   3. Enter the Username and Password you use to log in to your Sectigo Certificate Manager account.
   4. Click Test Connection to verify your credentials and connectivity.
      If the test is successful, you'll see a confirmation message: "Connection to the Sectigo CA is established."
   5. Click Next.
6. On the Issuance page, specify the product offerings to make available for request policies:
   1. In the Product Options dropdown, select the Sectigo Certificate Manager products you want to use with Next-Gen Trust Security.
      How do I know which product options to select?: In this step, we recommend you select all products that you might want to use with Next-Gen Trust Security. You can restrict which products are available to specific users when you create the request policy. Selecting them here makes them available for request policies that use this CA account. You can modify this selection later by editing the CA account settings.
   2. Enter a Renewal Window in days.
      The renewal window determines how Next-Gen Trust Security replaces a Sectigo Certificate Manager certificate. A certificate inside the window is renewed; a certificate outside the window is reissued, which keeps the original order and expiration date. Learn more about certificate renewal and reissuance.
   3. Click Add.
   4. Click Next.
7. (Optional) On the Import page, configure settings to import existing certificates from your Sectigo Certificate Manager account.
   If you don't want to set up certificate import, click Create to finish.
   1. In the Import options section, select whether to include revoked or expired certificates in the import.
   2. To schedule automatic imports, enable the Scheduled import option, then configure the schedule.
      Tip: Consider import duration when scheduling: Certificate import from Sectigo Certificate Manager can take significant time, especially if you have a large certificate inventory. Import operations may take 45 minutes or longer depending on the number of certificates. The Sectigo Certificate Manager API imports the entire inventory of certificates in your account each time—it does not support incremental updates. It is recommended to configure weekly scheduled imports rather than more frequent intervals.
   3. Click Create.

Authorized Domains

What's Next