# Security Certificate Inventory and Management **URL:** \ **Category:** Technical Forums\ **Tags:** management, certficate\ **Created:** [May 23, 2024, 2:45pm UTC](https://community.f5.com/t/security-certificate-inventory-and-management/74547 "2024-05-23T14:45:16Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![jlsantini](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/jlsantini/32/23245_2.png) [@jlsantini](https://community.f5.com/u/jlsantini)\ **Post date:** [May 23, 2024, 2:45pm UTC](https://community.f5.com/t/security-certificate-inventory-and-management/74547/1 "2024-05-23T14:45:16Z")
Hello! Several years ago, I was tasked with oversight for our security certificate inventory and management after we encountered unintended outages because no change management was in place to insure everyone was on the same page. Our change management process is considerably better as we’re using actual change requests instead email. 😃 Our previous security certificate inventory was a privately held spreadsheet by the person managing most of our certificate renewals and update. If our Nagios admin cannot configure an alert to check a cert, we’re at risk of missing a certificate expiration.  We have self signed certificates as well as certificates purchased from vendors. We’re now relying on report from Nagios based on certificate checks configured by our Nagios admin. This data goes into Splunk and I receive a weekly report with certificate data.  I’m using a MS Team channel that includes systems admins as well as database and application development resources.  I alert the group when a certificate or certificates are expiring in 30 days.  I’ve been told that no certificate renewals can be done more than 30 days prior to expiration.  In short, I nag until someone submits a change request with a scheduled maintenance window to update the certificate(s) prior to expiration. Although our current process is much better than when I first became involved, improvement is needed so I’m asking for suggestions/recommendations. What security certificate inventory management solutions are you using?  What are your security certificate management processes? Thank you! Jodi ---
**Author:** ![F5\_Design\_Engineer](https://d1p9zq3aats0t8.cloudfront.net/user_avatar/community.f5.com/f5_design_engineer/32/2479_2.png) [@F5\_Design\_Engineer](https://community.f5.com/u/F5_Design_Engineer)\ **Post date:** [May 26, 2024, 11:08am UTC](https://community.f5.com/t/security-certificate-inventory-and-management/74547/2 "2024-05-26T11:08:27Z")
If you’ve deployed multiple F5 BIG-IP appliances to run your business applications, you know how important – yet complex – it is to manage keys and digital certificates. **Keyfactor** enables enterprises to automate requests, provisioning, and renewal of certificates across F5 appliances to avoid certificate-related outages and improve security > **[\[Demo\] How to Automate F5 Certificate Management](https://www.keyfactor.com/blog/demo-how-to-automate-f5-certificate-management/)** > > Learn how to maximize F5 BIG-IP uptime and security with Keyfactor’s certificate automation.