Troubleshooting

Diagnose issues along the real workflow: target → job → result → validation → issuance → deployment.

Discovery

• Pending too long: check existing jobs and job log.
• Timeout: validate DNS, route, firewall and TLS port.
• No certificate: confirm a TLS service exists.
• Partial results: review target limit, timeout and scope.

Discovery Agent

• Offline: local service, outbound HTTPS, DNS and clock.
• Invalid enrollment token: create a new single-use token.
• No local results: test targets directly from the Agent host.

Domain validation

• DNS: credentials, zone and propagation.
• HTTP: public routing and challenge content.
• Repeated failure: fix the cause before retrying.

Renewal

• Validation failed: pre-issuance problem.
• Certificate request failed: provider or policy data.
• Certificate available not deployed: issued but not served.
• Deployment not confirmed: verify endpoint, port and installation path.

Support request

Provide organization, configuration/policy name, approximate time, target/domain, job/history identifier and visible error.