Certificate Renewal & Rotation
SecurityMonitor expiry → request renewal → validate certificate → deploy to infrastructure → verify TLS connectivity.
systemapicli
Why OSOP matters here
Expired certificates cause outages. OSOP tracks every renewal cycle, deployment step, and connectivity test — ensuring your automation actually works and alerting you when it doesn't.
Workflow Steps (5)
1
Monitor Certificate Expiry
system2
Request Renewal
api3
Validate New Certificate
system4
Deploy Certificate
cli5
TLS Connectivity Test
cicdConnections (5)
Monitor Certificate Expiry→Request Renewalconditionaldays_until_expiry <= 30
Request Renewal→Validate New Certificatesequential
Validate New Certificate→Deploy Certificatesequential
Deploy Certificate→TLS Connectivity Testsequential
TLS Connectivity Test→Deploy CertificatefallbackRollback to old cert
5
Steps
5
Connections
4
Node Types