Certificate Lifecycle Management

A maintained inventory of the certificates on your in-scope servers, monitoring of expiry and certificate health, procurement on your authorisation, installation and binding to server services, renewal ahead of expiry, and reporting on certificate status.

We manage certificates used by services on your in-scope servers, with the scope agreed during service design. Where you operate an internal certificate authority, legacy service or unsupported platform, we agree what we can manage safely, identify any limitations and explain the risk and commercial implications upfront.

Firewall and VPN certificates sit with Firewall Management, application-layer certificates sit with Application Support, and device certificates sit with Modern Workplace. We will tell you where a certificate falls outside this service rather than leave a gap.

You do. We procure on your written authorisation and the certificate cost is yours, so you keep control of which authority you use and what you spend.

We start the renewal with enough lead time to complete validation, installation and testing as a planned change. The lead time is agreed during service design and tracked as part of the service.

We treat it as an incident, replace it as a priority and look at why the tracking did not catch it. The point of the service is that this does not happen, and when it does we tell you what went wrong.

We generate, install and handle key material under our secure operational process. The certificates and keys remain yours, and we document where each one is installed.

You pay a monthly charge per managed server, so cost tracks your estate and stays predictable as it grows. Your service schedule confirms the charging unit, in-scope servers and what is included. Certificate purchase costs are separate.

We discover the certificates across your in-scope servers, build the inventory, flag anything close to expiry or already expired, and agree renewal routes and approvers with you before go-live. Most customers find certificates during this step that nobody had a record of.

We manage estates that sit outside our reference architecture. Where an unsupported version or a legacy application limits what we can protect or enforce, we tell you up front, what it means for your risk position and what it changes commercially.