You can view and manage your issued certificates through the Entrust Certificate Hub product, which offers more advanced Certificate Lifecycle Management features.

Certificate Hub is not part of the PKIaaS offering and requires a separate license. Please contact your Entrust sales representative if you want to purchase Certificate Hub.

Connecting your CA

Connect your issuing CA as a source using the credentials obtained in Generating CA Gateway credentials . The URL will be the relevant one listed in the Entrust CA Gateway API. Once you set this up, Certificate Hub will check with your CA every 15 minutes and pull in any issued certificates through CEG or other applications. It will also update for any revocations.

Optionally, you can also connect your issuing CA as an Authority. The URL will be the same. Connecting your issuing CA as an authority will allow you to revoke and manually issue certificates for other applications supported by the certificate profiles assigned to your CA.

Dashboard

The Certificate Hub dashboard provides a quick overview of all activities.

Reporting on certificate activity

Certificate Hub provides an engine to define reports based on your business needs, such as daily certificate issuance, revocation, and renewal activities.

Ad-hoc exploration

The certificate view allows you to filter and display certificates from your PKIaaS CA or any other CA that you have connected. Certificate Hub's "Single Pane of Glass" view gives you enterprise-wide visibility of all your PKI activity.

Expiry notifications

You can define expiry notifications to inform certificate owners that certificates are about to expire and must be renewed. Such notifications are valuable in some scenarios, but notifications may be unnecessary if you are using Certificate Enrollment Gateway to automate the issuance and renewal of certificates. You may find that weekly reports of certificates about to expire are a better way to monitor that the overall system operation is working.