Renewal policies
Translate renewal business rules into explicit triggers, actions, validation controls and workflow steps.
1. Main fields
Policies include name, description, enabled state, certificate type, trigger type/value, action, provider, validation method, retry count/interval, pre-validation, post-renewal validation, workflow and organization.
2. Triggers
- Days before expiry
- Risk level
- Domain validation
- Manual only
3. Actions
- Auto renew
- Notify only
- Manual review
- Validate domain
4. Validation
Methods include DNS, HTTP, Email and Auto-detection. Retry settings control attempts and interval. Pre-validation and post-renewal validation add control points around issuance.
5. Workflow
Step types include domain validation, certificate request, provider approval, installation test, notification and custom script.
6. Example
TLS Prod policy
Trigger: 30 days before expiry.
Action: auto renew.
Validation: DNS.
Workflow: Domain validation → Certificate request → Installation test.
Post-renewal validation: enabled.
Trigger: 30 days before expiry.
Action: auto renew.
Validation: DNS.
Workflow: Domain validation → Certificate request → Installation test.
Post-renewal validation: enabled.