User Certificate Renewal

Learn about custom Reminder and Expiration email notifications that can be issued when a certificate issued in Policy Manager is nearing its expiration date or has expired.

Security Configuration (Home) Policy Manager Domain Certificate Authority (CA)

Trusted CA Certificates Identity Systems Identity Profiles Privacy

Supported Platforms: 7.0 and greater.

Table of Contents

  1. View User Certificate Renewal Summary
  2. Modify Renewal Notification

View User Certificate Renewal Summary

  1. Go to Configure > Certificates > User Certificate Renewal.
    The User Certificate Renewal Summary screen displays and presents the configuration of the currently defined "Reminder" and "Expiration" certificate renewal email notifications.

back to top

Modify Renewal Notification

Update the "Reminder Email" and "Expiration Email" configuration for certificates issued in Policy Manager.

  • Renewal details (reminder interval, "From" email), and email content are customizable.
  • Substitutable variables representing certificate elements can be included in the email content based on your requirements.
To modify a renewal notification
  1. Go to Configure > Certificates > user Certificate Renewal. The User Certificate Renewal Summary screen displays.
  2. Click Modify Renewal Notification. The Modify Renewal Notification screen displays, showing the current renewal notification configuration.
  3. (Optional) Modify Renewal Details.
    Note: Substitutable variables are supported in the "Subject" and "Body" for both "Reminder" and "Expiration" email types. The variable names are enclosed in ${}s. Supported variables include:
    • ${expiration.date}—Expiration date of the certificate
    • ${user.fullname}—Fullname attribute of the user
    • ${user.username}—Username attribute of the user
    • ${certificate.subject.dn}—Subject Certificate Name of certificate
    • ${certificate.issuer.dn}—Issuer Name of certificate
  4. Remind Users of Expiration—Use the drop-down to configure the frequency that email reminders will be sent out for both Reminder and Expiration email types. Select from:
    • Never
    • Once
    • Daily
    • Weekly
  5. Generate email from the following address—Use this text field to directly enter the number of days prior to a certificates expiration that you would like an email sent.
  6. (Optional) Modify the Reminder Email.
    • Subject—Enter a custom email subject line.
    • Body—Enter the body of the email.
    • Reset—Reset the email configuration back to the Policy Manager default email template.
  7. (Optional) Modify the Expiration Email.
    • Subject—Enter a custom email subject line.
    • Body—Enter the body of the email.
    • Reset—Reset the email configuration back to the Policy Manager default email template.
  8. Click Apply. Changes are saved and the User Certificate Renewal Summary screen displays.

back to top