CertKit Documentation
1. Introduction
Architecture, supported platforms, and core terminology.
2. Certificate Collections
Logical grouping for certificates, agents, and access control.
3. Certificates
Managing certificate intent, issuance, and deployment paths.
3.1 ACME Issuers
3.2 ACME Failures
3.3 ARI & Automated Renewals
3.4 Issued Certificate Details
3.5 Certificate Explorer
3.6 Signatures & Key Algorithms
3.7 Post-Quantum Cryptography
4. Host Monitoring
Public and intranet endpoint verification, expiry tracking, and alerting.
5. Discovery
Monitoring Certificate Transparency (CT) logs for your domains.
6. Agents
Agent installation, lifecycle management, and auto-updates.
6.1 Software Auto-Discovery
6.2 Deployment Configs
6.3 Deploy Windows
6.4 Built-in Templates
6.5 Deployment Knowledge Base
6.6 Custom Templates
6.7 Legacy Windows Installs
6.8 Agent Troubleshooting
6.9 Proxy Configuration
6.10 Antivirus and EDR Exclusions
6.11 Agent Locking
7. Keystore
On-premise private key storage and isolation.
8. Private PKI
Run private Certificate Authorities for internal names, IPs, and mTLS.
8.1 Trust Distribution
8.2 Revocation & CRLs
8.3 Name Constraints
8.4 Bring Your Own Root
9. Activity Log
Audit trails for Collections and accounts.
10. Access Control
User roles, permissions, and collection-level scoping.
11. Authentication
SAML SSO and multi-factor authentication setup.
12. Managed Accounts
Multi-tenant management and MSP configuration.
13. Alerts & Notifications
Configure certificate alerts, weekly summaries, and preferences.
14. API
Read-only REST API for collections, certificates, monitored hosts, and agents.
15. Security
How CertKit secures accounts, private keys, credentials, and agents.
16. Reference
Technical reference and external integration guides.