All Products
Search
Document Center

Certificate Management Service:Configure notifications for SSL certificates

Last Updated:Apr 16, 2024

You can use the notification feature of Certificate Management Service to configure custom notifications for SSL certificates. This helps meet your specific requirements. This topic describes how to configure custom notifications for certificates.

Background information

You can use the notification feature to configure expiration notification policies for issued certificates. You can also configure notification policies for alerts at core stages during the lifecycles of certificates, such as certificate download and revocation. In addition, you can specify whether to receive the latest updates and announcements of Certificate Management Service, and the updates and changes to intermediate root certificates. This helps provide precise and personalized support for your O&M operations.

The following table describes the differences between a default notification policy and a custom notification policy.

Scenario

Default notification policy (Only expiration notifications are included.)

Custom notification policy (Expiration notifications and core operation notifications are included.)

Notification contact

1 contact

Up to 10 contacts

Notification method

Email and internal message

Email, internal message, and chatbot

Notification time

All day

All day or from 09:00 to 20:00

Notification dimension

Only certificate expiration notifications

The following types of notifications are supported:

  • Business:

    • Certificate download notification

    • Certificate revocation notification

    • Certificate deletion notification

    • Certificate sharing notification

    • Certificate expiration notification

    • Certificate hosting notification

  • Alerts:

    • Alert for certificates that expire and are not renewed

    • Alert for disabling notifications

    • Alert for hosting failures

  • Service changes: notifications for items such as notices, announcements, updates, and upgrades

Expiration deadline notification

Notifications are sent 30 days before the expiration date of a certificate. You cannot change the time.

The following periods of time are supported:

  • 30 days before expiration

  • 60 days before expiration

  • 90 days before expiration

Expiration reminder frequency

Only expiration notifications can be sent 30 days before the expiration date of a certificate. You cannot change the time.

The following frequencies are supported:

  • Only once

  • Every one day

  • Every three days

  • Every five days

  • Every seven days

Prerequisites

Procedure

  1. Log on to the Certificate Management Service console.

  2. In the left-side navigation pane, click Notification.

  3. On the SSL Certificates page, find the certificate for which you want to configure notifications, and click Edit in the Actions column.

  4. In the Edit Message Reminder panel, turn on Notification Switch, configure the parameters, and then click OK.

  5. Parameter

    Description

    Alert Contact

    Specify a certificate notification contact. You can specify up to 10 contacts.

    Notification Method

    Select the method to receive notifications. Valid values: Email Address, Internal Message, and DingTalk/WeCom/Lark.

    To use the DingTalk, WeCom, or Lark method, specify a webhook URL for DingTalk, WeCom, or Lark when you create a contact on the Information Management page. For more information, see Manage contacts.

    Notification Content

    Select Business Notification, Alert Notification, and Product Change.

    Expiration Reminder Frequency

    Select the frequency at which you want to receive notifications.

    Expiration Deadline Notification

    Select a time range during which you want to receive notifications before the certificate expires.

References