ADSS Web RA supports certificate renewal before a certificate expires. It is the process by which a user renews a certificate for the same public key used in an expiring certificateADSS Web RA supports certificate renewal before a certificate expires. It is the process by which a user renews a certificate for the same public key used in an expiring certificate. 


Expand Requests > Renewal Requests from the left menu pane. The renewal requests listing will appear. The Request By section will display Citizen ID below the user name if it is enabled in the Configurations > Default Settings.



Renew a request 


An operator can renew a certificate by following the steps mentioned below from the web portal:


  1. Expand Requests > Certificate Requests from the left menu pane. 
  2. Then click button against a specific certificate that needs to be renewed. Click View Request. 



The Welcome Note will appear. 



Click next, the Subject Distinguished Name (SDN) screen will appear. 



The Certificate Validity screen will appear. Click next. 



The Vetting Form screen will appear. Click next to proceed. 



Then the Message screen will appear. You can add a message and then click Renew. 



The Certificate Renew window will appear. Click the confirmation check box, add an optional message and click Renew.



The request will be renewed and will appear in the renewal requests listing. 


Second Factor Authentication 


If second factor authentication is enabled on certificate requests, the configured authentication mechanism will function accordingly. When a user clicks on the Generate button, the authentication window will appear, and once it accepts the selected method, it will generate a certificate. 


The authentication mechanism can be one of the following:


  • SMS OTP Authentication 
  • Email OTP Authentication 
  • Email & SMS Authentication
  • SAML Authentication 
  • Active Directory Authentication 
  • Azure Active Directory Authentication
  • OIDC Authentication