Wisdom of the crowd - Cert manament

[StN]

Ok peoples - what is your favourite tool for keeping track of certs.

Looking for:
Renewal reminders
Discovery across WAN
CSR generation
Ideally auto renewal via external APIs
Integration with Service Managment tools (ie ServiceNow, Maximo etc)
On premise (vs cloud - see discovery, and reluctance for even more agents being deployed...)


Or do people just keep a list and maintain it - prompted by Digicert reminders etc?

[xor]

I use a single registrar for my domains and then use Lets Encrypt for the cert things. It just works.

[StN]

Originally Posted by xor

I use a single registrar for my domains and then use Lets Encrypt for the cert things. It just works.

Yeah - love to go that way, but massively hybrid environment here (which is why I need a tool that spans a fair bit!) - mopping up after shadowIT when they have pre-paid a few years in advance takes time

I do love the way Let'sEncrypt does the auto renewals and just makes the pain go away.

[xor]

Sounds like you need more automated processes rather than another tool.

Hire some devops nerd to build out some deployment pipeline thing for you once you've audited the shit out of the wild children of the ShadowIT world.