Focus

Next-Gen Trust Security

About importing certificates from a Zero Touch PKI CA

Table of Contents

About importing certificates from a Zero Touch PKI CA

The Zero Touch PKI (ZTPKI) CA import feature enables PKI administrators to seamlessly import existing certificates issued by a specific ZTPKI certificate authority (CA) policy. This capability automates certificate discovery and onboarding, offering better visibility and centralized management of certificates across your ZTPKI environment.

Features and benefits

Import active, expired, or revoked certificates: When you configure a ZTPKI CA in Next-Gen Trust Security for certificate import, you can choose to include not only active certificates, but also expired or revoked certificates, as well.
ZTPKI CA integration: Add a ZTPKI CA connection with custom configurations to establish a trusted integration point for certificate management.
Automated certificate import: Automatically discover and import all existing certificates issued by a selected ZTPKI policy, reducing manual work and minimizing errors.
On-demand import: Initiate a manual certificate discovery at any time using the Import button.
Detailed import statistics: From the Statistics tab of your connected ZTPKI CA, review currently used ZTPKI policies (Product Options) and information about issued and imported certificates.

These features help organizations improve PKI operational efficiency, reduce administrative overhead, and ensure broader security compliance by maintaining an up-to-date inventory of issued certificates.

Audience and use cases

The intended audience for this feature is PKI administrators who manage certificate lifecycles across enterprise environments using ZTPKI.

Typical use cases include:

Automating the discovery and onboarding of certificates from an external ZTPKI CA.
Centralizing certificate inventory management across multiple environments.
Enhancing certificate visibility for audit, security, and compliance requirements.

Requirements and compatibility

To use the ZTPKI CA import feature, you must have:

An active ZTPKI certificate authority with defined policies.
Administrative access to configure ZTPKI CA connections.
Necessary API credentials or authentication information for integration (depending on your ZTPKI deployment).

Next steps

Learn how to import certificates from a ZTPKI CA.

Importing certificates from a CA using EJBCA

Import certificates from a Zero Touch PKI CA