Getting started¶
CertIntel is a certificate inventory and monitoring platform: it watches expiry across every certificate your organization has, from public endpoints, internal networks, and ACME renewal runs, and gives you one place to see what's expiring, what failed, and what's been acknowledged.
The shape of an account¶
- A tenant is your organization's whole CertIntel account.
- A tenant contains one or more child organizations - the unit most permissions, API keys, monitored targets and certificates are scoped to. A small account might have exactly one; a larger one splits by team, business unit, or customer.
- Users, roles, API keys, and install tokens are described fully in Organizations, users & roles.
Signing in¶
Your administrator gives you a sign-in link - either https://<slug>.app.certin.tel
for your specific organization, or a shared login page that asks for your email and
routes you to the right place. If your organization uses single sign-on, see
OIDC / SSO overview.
A first-week checklist¶
- Add something to monitor. The fastest path is the Public Endpoints page
- add any externally-reachable hostname and CertIntel polls its certificate on a timer, no key or script required. See Public site monitor.
- Choose who owns renewal. On Windows, the CertIntel Agent can own the ACME account, order, renewal schedule and installation from one workflow. See Certificate workflows & deployment. If another client remains authoritative, connect its reporting scripts through ACME check-ins & renewals.
- Cover anything CertIntel can't reach directly - internal load balancers, appliances, an internal CA - with the internal certificate scanners or the Windows Agent.
- Set up an alert destination so expiry warnings and monitor failures reach you somewhere you'll actually see them - see Alerts & notifications.
- Invite your team and assign roles that match what each person needs to do - see Organizations, users & roles.
Where things live in the dashboard¶
| Page | What it's for |
|---|---|
| Certificates | The unified inventory - every certificate from every source, searchable, with bulk acknowledge/delete. See Certificates. |
| Public Endpoints / All Hosts | Public site monitor targets, and every enrolled agent/reporting device. |
| Renewals | ACME renewal history, grouped by renewal configuration. |
| API Keys / Install Tokens | Credentials for scripts and agents. See API keys & authentication and Install tokens & enrollment. |
| Delegated DNS-01 | CertIntel-hosted DNS-01 challenge records for ACME clients that need one. See Delegated DNS-01 (dashboard). |
| Users / Organizations | Account and access administration. |
| Activity Log | An audit trail of what changed, by whom, and every rejected/denied request. |
Getting help¶
Interactive API docs are available at /api/v1/docs on your CertIntel deployment.
For a specific problem, check Troubleshooting first.