Discovering external certificates using Domain or External Discovery¶
We show you how to set up domain-, FQDN-, or IP address-based external certificate discovery. By "external," we mean outside of a firewall.
Discovery of external certificates is performed automatically. However, you can schedule when discovery is performed.
To discover external certificates using Domain or External Discovery¶
In the menu bar, click Discovery.
Do one of the following:
- Click Domain Discovery if you want to scan one or more specific domains, such as domainname.com. Be sure the domains have been validated.
- Click External Discovery if you want to discover certificates by specific FQDN or IP addresses (or ranges of IP addresses).
(Conditional) If you selected External Discovery, type one or more external (not behind a firewall) FQDNs and/or IP addresses, or ranges of IP addresses).
Example IP Address and address range:
After you perform a discovery, it's a good idea to then assign certificates to applications.