Requesting and viewing a certificate
Table of Contents
Expand all | Collapse all
-
- Activate Next-Generation Trust Security
-
-
- Configure AWS connection
- Configure Azure Key Vault connection
-
- Workload Identity Federation authentication
- Workload Identity Federation - Azure Identity Provider authentication
- Next-Gen Trust Security Generated Key authentication
- User permissions
- Workload Identity Federation authentication
- Next-Gen Trust Security Generated Key authentication
- User permissions
- Supported OIDC claims
-
-
-
-
- Create an F5 BIG-IP LTM machine
- Create a Microsoft Azure Private Key Vault machine
- Create a Microsoft IIS machine
- Create a Microsoft Windows (PowerShell) machine
- Create a Microsoft SQL Server machine
- Create a Common KeyStore machine
- Create a Citrix ADC machine
- Create an Imperva WAF machine
- Create a VMware NSX Advanced Load Balancer (AVI) machine
- Create an A10 Thunder ADC machine
- Create a Cloudflare machine
- Create Kemp Virtual LoadMaster machine
- Create a Palo Alto Panorama machine
-
- Provision to an F5 BIG-IP LTM
- Provision to a Microsoft Azure Private Key Vault
- Provision to Microsoft IIS
- Provision to Microsoft Windows (PowerShell)
- Provision to Microsoft SQL Server
- Provision to a Common KeyStore
- Provision to a Citrix ADC
- Provision to an Imperva WAF
- Provision to VMware NSX Advanced Load Balancer (AVI)
- Provision to an A10 Thunder ADC
- Provision to Cloudflare
- Provision to a Kemp Virtual LoadMaster
- Provision to Palo Alto Panorama
-
-
- 47-Day Validity Readiness TLS Certificates dashboard
- About the Certificate Inventory
- Managing certificate lifecycle settings
- Reissuing certificates in Next-Gen Trust Security
- Downloading certificates, certificate chains, and keystores
- Retiring, recovering, and deleting certificates
- Finding certificates in the certificate inventory
- Importing certificates from a CA using EJBCA
- Notification Center overview
- Domain-based validation for external emails
- Managing user accounts
- Troubleshooting
Requesting and viewing a certificate
You can request, download, and view certificates using Next-Gen Trust Security.
Before you begin
Before requesting a certificate, ensure the following:
- An application exists that you can use for the request.
- At least one issuing template is assigned to the application and meets your requirements.
To request a certificate
- Sign in to Next-Gen Trust Security.
- Click Insights > Create Certificate Request.or
In the menu bar, click Applications, locate the application, open the actions menu, and click Request Certificate.
- From the Application dropdown, select an existing application, or select Create a new application.Use an existing application
- Select the application for the request.
- Select an Issuing Template.When you select a template, its policy details appear in the Issuing Template Policy column. If the application has only one issuing template, it is selected automatically.
Create a new application- Select Create a new application.
- In the Create a new application dialog, complete the following fields:
- Application Name
- (Optional) Description
- Select one or more Issuing Templates
When only one issuing template is selected, it is applied automatically.
- (Optional) Select or create one or more tags to associate with the certificate.
- Click Continue.
- Select a Request method.Automated certificate requestComplete the request fields. Some values may be pre-filled or locked based on the issuing template policy.After completing the fields, click Submit Request.Provide my own CSRPaste the CSR into the CSR Upload field and select a Validity period.Click Submit Request.
- Click Finish.
The request is sent to the certificate authority defined by the issuing template.
Certificate request timeouts
Certificate requests expire if not completed within the following timeframes:
- DigiCert: 7 days
- GlobalSign MSSL: 24 hours
- All other supported certificate authorities: 30 minutes
View the certificate request
- Click Insights > Certificate Requests.
- By default, the most recent requests appear at the top of the list.
- If filters are applied, click Clear.
- Click Filter, enter search criteria (such as a domain name), and click Apply.
- Select a certificate request to view its details.