Discovery API
2 minute read
Your CertCentral account and certificates remain active. To discover certificates and endpoints programmatically, use the DigiCert® Trust Lifecycle Manager API. Trust Lifecycle Manager provides API operations for deploying discovery tools, scanning networks and systems, and adding discovered certificates and endpoints to a centralized inventory.
The Trust Lifecycle Manager API is not a drop-in replacement for the retired CertCentral Discovery API. It uses DigiCert ONE hostnames, /mpki/api/v1 and related versioned base paths, and the x-api-key request header. Update your integration to use the resources, authentication, request formats, and permissions described in the Trust Lifecycle API documentation.
Trust Lifecycle Manager API resources
Open the Trust Lifecycle Manager API reference and use the following sections for discovery workflows.
| API reference section | Purpose |
|---|---|
| Network scans | Configure and manage cloud-based and sensor-based network scans. Use these operations to initiate discovery scans and retrieve information about configured scans. |
| Sensors | Allocate and manage DigiCert sensors used to scan private networks. For example, POST /mpki/api/v1/sensor/allocate provisions a sensor for network discovery. |
| Inventory | Search and manage certificates discovered or imported into the Trust Lifecycle Manager inventory. |
| Inventory endpoint | Get information about discovered, automatable, and unsecured endpoint locations, including associated certificate metadata. |
| Delete Inventory | Remove certificate, key, or endpoint records that were added to inventory by Trust Lifecycle Manager discovery tools. |
| Agents and System scans | Manage DigiCert agents and agent-based scans that discover certificates in operating-system certificate stores and local file systems. |
| Sensor integrations and Connectors | Manage integrations that use sensors to discover certificates on network appliances, cloud services, and other remote systems. |
Trust Lifecycle Manager uses /mpki/api/v1/scan resources for network discovery workflows. Before starting sensor-based or agent-based discovery, deploy and configure the corresponding Trust Lifecycle Manager client tools.
Migrate from CertCentral
You need a Trust Lifecycle Manager account that includes Discovery and Automation features. Depending on the types of scans you use, you may also need to replace CertCentral sensors or agents, link your CertCentral account, and configure the appropriate connectors.
For instructions for setting up cloud scans, sensor-based network scans, agents, sensors, and connectors, see Enable discovery and automation features in Trust Lifecycle Manager to match CertCentral.
For information about viewing and managing certificates and endpoints added by discovery tools, see Manage inventory.