Focus

Next-Gen Trust Security

Requesting and Viewing a Certificate

Table of Contents

You can request, download, and view certificates using Next-Gen Trust Security.

Before requesting a certificate, ensure the following:

At least one issuing template is configured and available for use
You have TSG access to at least one Issuing Template from the parent TSG
You have the appropriate Strata Cloud Manager (SCM) role permissions to request certificates

Access to Certificate Requests is controlled by your TSG scope and SCM role:

Parent TSG: Certificate Requests inventory accessed from the parent TSG includes Certificate Requests in the parent TSG and all child TSGs nested below it. Filtering can be applied to the inventory to limit the view to Certificate Requests in a subset of TSGs.
Child TSG: Certificate Requests inventory accessed from a child TSG only includes Certificate Requests in that specific child TSG.

Web UI actions: Users must have the appropriate SCM role permissions to perform web UI actions on Certificate Requests, including requesting certificates
API actions: Built-In Accounts must have the appropriate SCM role permissions to perform API actions on Certificate Requests, including requesting certificates

Sign in to Next-Gen Trust Security.
Click Insights > Create Certificate Request.
Select an Issuing Template.
When you select a template, its policy details appear in the Issuing Template Policy section.
(Optional) Select or create one or more tags to associate with the certificate.
Click Continue.
Select a Request method.
Automated certificate request
Complete the request fields. Some values may be pre-filled or locked based on the issuing template policy.
After completing the fields, click Submit Request.
Provide my own CSR
Paste the CSR into the CSR Upload field and select a Validity period.
Click Submit Request.
Click Finish.

The request is sent to the certificate authority defined by the issuing template.

Certificate requests expire if not completed within the following timeframes:

Click Insights > Certificate Requests.
By default, the most recent requests appear at the top of the list.
If filters are applied, click Clear.
Click Filter, enter search criteria (such as a domain name), and click Apply.
Select a certificate request to view its details.