Quick Start Guide

The CERTInext Quick Start Guide helps you get up and running with certificate lifecycle management in minutes. It provides a guided flow to onboard your environment, discover certificates, automate issuance, and enable deployment - all from a centralized platform.

This guide follows the same structure as the CERTInext portal, allowing you to navigate seamlessly between documentation and the product UI.

Step 1: Access CERTInext

Navigation: Login → Dashboard

  • Log in to the CERTInext portal using your credentials

  • Ensure your organization and user roles are correctly configured

  • Verify access to required modules such as Certificates, Integrations, and Templates

Step 2: Configure Prerequisites

Navigation: Settings → Global Settings / Integrations

Before starting, ensure:

  • Network access (Port 443 outbound enabled)

  • Required credentials for endpoints (IIS, Tomcat, F5, etc.)

  • Administrative privileges for Bot installation

  • CA integration (Public CA or Private CA such as emCA)

These prerequisites ensure smooth discovery, issuance, and deployment workflows

Step 3: Install and Configure Bot

Navigation: Integrations → Tools → Bots

  • Download the CERTInext Bot

  • Install on a target system (Windows/Linux)

  • Launch with administrator privileges

  • Activate using Account ID and Bot Token

The Bot acts as the execution engine for discovery and deployment across your infrastructure

Step 4: Discover Certificates

Navigation: Certificates → Discovery / Bots

  • Create a new Bot configuration

  • Define scan targets:

    • IP ranges

    • Domains

    • Ports / Port ranges

  • Select sources:

    • SSL/TLS, LDAP, AWS, File System, HSM, F5

  • Run scan

All discovered certificates will be visible in the centralized inventory


Step 5: Create Templates (CSR & Provisioning)

Navigation: Certificates → Templates

  • Create CSR Template

    • Define key algorithm, size, subject details

  • Create Provisioning Template

    • Define deployment type (Tomcat, IIS, F5, etc.)

    • Configure automation settings

Templates standardize issuance and ensure policy-driven automation

Step 6: Issue & Rotate Certificates

Navigation: Certificates → Inventory

  • Select a discovered certificate

  • Apply CSR + Provisioning templates

  • Initiate Certificate Issuance / Rotation

CERTInext automates:

  • Key generation

  • CSR creation

  • Certificate issuance (Public/Private CA)

  • Renewal workflows

Step 7: Auto Deploy Certificates

Navigation: Certificates → Provisioning

  • Select deployment type:

    • Tomcat (server.xml update + restart)

    • IIS (Windows store + binding update)

    • F5 (SSL profile update via API)

  • Apply provisioning template

Certificates are automatically deployed to endpoints without manual intervention

Step 8: Monitor Dashboard & Alerts

Navigation: Dashboard

Track:

  • Expiring certificates

  • Weak keys / vulnerabilities

  • Discovery coverage

  • Automation health

Configure alerts:

  • Expiry notifications

  • Policy violations

  • Security risks

Step 9: Enable Notifications & Reporting

Navigation: Settings → Integrations (SMTP) / Reports

  • Configure SMTP for alerts

  • Enable expiry notifications

  • Generate reports for:

    • Inventory

    • Compliance

    • Risk posture

Quick Navigation Map (UI Alignment)

Step
Action
CERTInext Navigation

1

Login & Access

Dashboard

2

Prerequisites

Settings / Integrations

3

Bot Setup

Integrations → Tools

4

Discovery

Certificates → Bots / Discovery

5

Templates

Certificates → Templates

6

Issuance

Certificates → Inventory

7

Deployment

Certificates → Provisioning

8

Monitoring

Dashboard

9

Alerts & Reports

Settings / Reports

Outcome

By completing this Quick Start Guide, you will:

  • Discover all certificates across your environment

  • Centralize certificate inventory and visibility

  • Automate issuance, renewal, and deployment

  • Eliminate downtime caused by expired certificates

  • Strengthen security and compliance posture

Last updated