Configure Certificate Expiration Notifications

Operations tutorial

Monitor certificate expiration and notify the right people before an outage occurs.

An expired certificate can disrupt everyday services. This tutorial configures a scheduled certificate check, an email template, and an event action so your team receives advance notice.

What you will configureDirect link to What you will configure

A certificate maintenance task that checks expiration on a schedule.
An email template containing the certificates due to expire.
An event action that sends the template when the task raises its event.

Configure the notification workflowDirect link to Configure the notification workflow

Create the certificate maintenance task

Go to Scheduler > Overview.
Click + Add.
In the Type dropdown, select Certificate Maintenance.
Name the task Certificate_Expiration_Notification, then click Save.
In Configuration, enable Expire Notification.
Open Schedule, enable the task, and choose a cadence—for example, once each day.
Click Save.

tip

Adjust the notification lead time to suit your renewal process. You can exclude certificates or override the default lead time for individual certificates.

Create the notification template

Go to Events > Templates.
Click + Add.
Name the template Certificate_Expiration_Template, then click Create.
In the Notification event dropdown, select certificate-maintenance: Certificate_Expiration_Notification.
Enter valid From and To addresses and a useful Subject.
In the email body, click + and add event > certificates_to_expire.
Click Save.

Connect the event to the template

Go to Events > Actions.
Click + Add.
In the Event type dropdown, select certificate-maintenance.
In the Event name dropdown, select Certificate_Expiration_Notification.
Click Add.
Select Certificate_Expiration_Template in the new row's Template dropdown.
Click Save.

Step 1 of 3

Verify the notificationDirect link to Verify the notification

Run the certificate maintenance task or wait for its next scheduled execution. When a certificate is within its configured notification period, NIM sends the template to the recipients you specified.

Configure certificate expiration notifications