For the complete documentation index, see llms.txt. This page is also available as Markdown.

Quick Start Guide

The CERTInext Quick Start Guide helps you get up and running with certificate lifecycle management in minutes. It provides a guided flow to onboard your environment, discover certificates, automate issuance, and enable deployment - all from a centralized platform.

This guide follows the same structure as the CERTInext portal, allowing you to navigate seamlessly between documentation and the product UI.

Step 1: Access CERTInext

Navigation: Login → Dashboard

  • Log in to the CERTInext portal using your credentials

  • Ensure your organization and user roles are correctly configured

  • Verify access to required modules such as Certificates, Integrations, and Templates

Step 2: Configure Prerequisites

Navigation: Settings → Global Settings / Integrations

Before starting, ensure:

  • Network access (Port 443 outbound enabled)

  • Required credentials for endpoints (IIS, Tomcat, F5, etc.)

  • Administrative privileges for Bot installation

  • CA integration (Public CA or Private CA such as emCA)

These prerequisites ensure smooth discovery, issuance, and deployment workflows

Step 3: Install and Configure Bot

Navigation: Integrations → Tools → Bots

  • Download the CERTInext Bot

  • Install on a target system (Windows/Linux)

  • Launch with administrator privileges

  • Activate using Account ID and Bot Token

The Bot acts as the execution engine for discovery and deployment across your infrastructure

Step 4: Discover Certificates

Navigation: Certificates → Discovery / Bots

  • Create a new Bot configuration

  • Define scan targets:

    • IP ranges

    • Domains

    • Ports / Port ranges

  • Select sources:

    • SSL/TLS, LDAP, AWS, File System, HSM, F5

  • Run scan

All discovered certificates will be visible in the centralized inventory

Step 5: Create Templates (CSR & Provisioning)

Navigation: Certificates → Templates

  • Create CSR Template

    • Define key algorithm, size, subject details

  • Create Provisioning Template

    • Define deployment type (Tomcat, IIS, F5, etc.)

    • Configure automation settings

Templates standardize issuance and ensure policy-driven automation

Step 6: Issue & Rotate Certificates

Navigation: Certificates → Inventory

  • Select a discovered certificate

  • Apply CSR + Provisioning templates

  • Initiate Certificate Issuance / Rotation

CERTInext automates:

  • Key generation

  • CSR creation

  • Certificate issuance (Public/Private CA)

  • Renewal workflows

Step 7: Auto Deploy Certificates

Navigation: Certificates → Provisioning

  • Select deployment type:

    • Tomcat (server.xml update + restart)

    • IIS (Windows store + binding update)

    • F5 (SSL profile update via API)

  • Apply provisioning template

Certificates are automatically deployed to endpoints without manual intervention

Step 8: Monitor Dashboard & Alerts

Navigation: Dashboard

Track:

  • Expiring certificates

  • Weak keys / vulnerabilities

  • Discovery coverage

  • Automation health

Configure alerts:

  • Expiry notifications

  • Policy violations

  • Security risks

Step 9: Enable Notifications & Reporting

Navigation: Settings → Integrations (SMTP) / Reports

  • Configure SMTP for alerts

  • Enable expiry notifications

  • Generate reports for:

    • Inventory

    • Compliance

    • Risk posture

Quick Navigation Map (UI Alignment)

Step
Action
CERTInext Navigation

1

Login & Access

Dashboard

2

Prerequisites

Settings / Integrations

3

Bot Setup

Integrations → Tools

4

Discovery

Certificates → Bots / Discovery

5

Templates

Certificates → Templates

6

Issuance

Certificates → Inventory

7

Deployment

Certificates → Provisioning

8

Monitoring

Dashboard

9

Alerts & Reports

Settings / Reports

Outcome

By completing this Quick Start Guide, you will:

  • Discover all certificates across your environment

  • Centralize certificate inventory and visibility

  • Automate issuance, renewal, and deployment

  • Eliminate downtime caused by expired certificates

  • Strengthen security and compliance posture

Last updated