Tag: automation
All PKI knowledge base pages tagged with "automation".
- 47-Day TLS Certificates: SC-081 Timeline and Automation Guide — CA/B Forum SC-081v3 phasedown to 47-day public TLS max by March 2029: timeline, DCV reuse, scope exclusions, and engineering priorities.
- ACME Protocol Explained: How Automated Certificate Issuance Works — Technical deep-dive into RFC 8555 ACME protocol. Account registration, challenge types, order flow, and implementation details for certificate automation.
- Certbot Renewal Automation: Deploy Hooks, Cron Jobs & --dry-run Testing — Automate Certbot SSL renewal with deploy hooks, cron jobs, and systemd timers. Includes --post-hook examples for nginx reload and --dry-run testing.
- Certificate Automation Readiness: ACME, ARI, and the 47-Day Mandate — Assess automation readiness for short TLS lifetimes: ACME maturity, ARI (RFC 9773), client support, four-level maturity model, and a practical readiness checklist.
- Certificate Lifecycle Management: Issuance, Renewal & Revocation Guide — End-to-end certificate lifecycle operations. Discovery, issuance workflows, automated renewal, revocation procedures, and audit compliance requirements.
- Certificate Renewal Automation: Scripts, APIs & Monitoring Setup — Automate certificate renewals at scale. ACME client configuration, API-driven workflows, expiry monitoring, and alerting for failed renewals.
- Certificate-as-Code: Terraform, Kubernetes & GitOps for PKI Automation — Manage certificates like infrastructure code. Terraform ACM resources, cert-manager in Kubernetes, GitOps workflows with ArgoCD, and OPA policies that enforce certificate standards automatically.
- DNS A Record Implementation for ACME Infrastructure — DNS A record implementation for ACME infrastructure: IaC patterns, TTL strategies, multi-region setup, and automation to keep HTTP-01 validation reliable at scale.
- HTTP-01 Challenge Commands & Usage — Certbot and ACME client command reference for HTTP-01 validation—webroot, multi-domain, custom ports, and renewal patterns for production certificate automation.
- Keyfactor vs Venafi (CyberArk) vs DigiCert 2026: Real Pricing, TCO & Who Actually Wins for 10K–1M Certificates — Independent 2026 matrix with exact costs, scale limits, PQC readiness and decision tree. Stop guessing — see which vendor survives 100-day certs and quantum migration.
- Version Check Tools Commands & Usage — Use certbot --version, snap list certbot, and pip show certbot to verify ACME client versions across installation methods. This reference covers the commands and scripts operations teams use to audit versions and enforce minimum 4.1.0 for ARI support across the fleet.