Automation API
3 minute read
This retirement applies to DigiCert® CertCentral managed automation. Your CertCentral account and certificates remain active. The CertCentral ACME and other API integrations continue to be supported.
For certificate lifecycle automation, use the DigiCert® Trust Lifecycle Manager API. Trust Lifecycle Manager provides API operations for scheduling and executing certificate issuance, renewal, revocation, delivery, and installation across enterprise infrastructure.
The Trust Lifecycle Manager API is not a drop-in replacement for the retired CertCentral Automation API. It uses DigiCert ONE hostnames, /mpki/api/v1 and related versioned base paths, and the x-api-key request header. Update your integration to use the resources, authentication, request formats, and permissions described in the Trust Lifecycle API documentation.
Trust Lifecycle Manager API resources
Open the Trust Lifecycle Manager API reference and use the following sections for managed automation workflows.
| API reference section | Purpose |
|---|---|
| Certificate lifecycle automation | Request certificate lifecycle automation for an individual endpoint or multiple endpoints, including automated certificate delivery and installation. This section includes POST /mpki/api/v1/automation, POST /mpki/api/v1/automation/bulk, and POST /mpki/api/v1/automation/admin-web-request. |
| Certificate lifecycle automation inventory | Get automation-related information about active endpoints that are eligible for managed automation, including the endpoint GUID required in automation requests and the current automation status. |
| Inventory endpoint | Get details for unsecured, discovered, and automation-ready endpoint locations, including associated certificate metadata |
| Profiles | Create and manage certificate profiles that define certificate characteristics, enrollment methods, and other policy settings used by automation workflows. |
| Agents | Manage DigiCert agents used for discovery and certificate automation on web servers and other local systems. |
| Sensors, Sensor integrations, and Connectors | Manage the sensors and integrations used to discover and automate certificates on network appliances, cloud services, and other remote systems. |
| ACME credentials | Manage credentials for ACME-based enrollment and automation workflows in Trust Lifecycle Manager. |
Migrate from CertCentral
Before using these API operations, configure Trust Lifecycle Manager for your deployment targets. You need a Trust Lifecycle Manager account that includes Discovery and Automation features. Depending on your environment, you may also need to:
- Link your CertCentral account to Trust Lifecycle Manager.
- Replace CertCentral agents and sensors with Trust Lifecycle Manager agents and sensors.
- Configure connectors for network appliances, cloud services, and certificate authorities.
- Create replacement certificate automation profiles in Trust Lifecycle Manager.
For the complete transition workflow, see Enable discovery and automation features in Trust Lifecycle Manager to match CertCentral.
For descriptions of the endpoint inventory and lifecycle automation API controllers, along with their relationship to the Trust Lifecycle Manager console, see Manage endpoints.