ADSS Web RA Server supports certificate renewal before a certificate expires. It is the process by which a user renews a certificate for the same public key used in an expiring certificate.


This section lists all the renewal certificate requests. 


As a pre-requisite, the renew certificate option should be enabled in the Policy section from the admin portal.  


  1. Renew a Certificate 
  2. Renew a Certificate with CAA Records


Renew a Certificate 


To renew a certificate from the web portal:


  1. Navigate to the "Certificate Center" and click "Issued Certificates". 
  2. Click the button against the certificate that you want to renew and click on "More Actions". 



  1. Certificate action screen will be displayed. Select "Renew Certificate" from the drop down, click the confirmation button and then click "Renew". 



  1. The certificate generated roaster message will appear. This certificate request will appear in the renewal requests listing. 


Renew a Certificate with CAA Records


To renew a certificate from the web portal:


  1. Navigate to the "Certificate Center" and click "Issued Certificates". 
  2. Click the button against the certificate that you want to renew and click on "More Actions". 



  1. Certificate action screen will be displayed. Select "Renew Certificate" from the drop down, click the confirmation button and then click "Renew". 



  1. The certificate generated roaster message will appear. This certificate request will appear in the renewal requests listing. 


Second Factor Authentication 


If second factor authentication is enabled on renewal requests, the configured authentication mechanism will function accordingly. When a user clicks on the Renew button, the authentication window will appear, and once it accepts the selected method, it will generate a certificate. 


The authentication mechanism can be one of the following:


  • SMS OTP Authentication 
  • Email OTP Authentication 
  • Email & SMS Authentication
  • SAML Authentication 
  • Active Directory Authentication 
  • Azure Active Directory Authentication
  • OIDC Authentication