Skip to content

Set up email notifications

Email notifications to help you track the status of your certificates and installations and alert you to any risks that need attention. The notification emails give you a consistent and steady view into the status of your environment without having to sign in to .

If you are Premium subscriber, you can specify specify additional email addresses that the reports should be forwarded to. Even users who aren't registered for can have their email addresses added to the distribution.

Two reports are available:

Machine Identity Digest (Premium Feature)

This report summarizes certificate and installation activity. It highlights potential risks that you should be aware of so that you can resolve these issues.

Description of items included in the Machine Identity Digest email

Certificates at risk

Item Description
Expired Installed certificates currently expired.
Expiring soon Installed certificates scheduled to expire in the next 60 days.
Not managed Certificates that are not currently assigned to an application.
Weak keys Certificates that have RSA keys less than 2048 bit.
Weak hash algorithm Certificates that use the MD5 or SHA1 hashing algorithm.

Installations at risk

Item Description
Update required Certificate installations that are using older versions of certificates that should be replaced with the newer versions.
Certificate chain errors Certificate installations where the chain is either expiring soon, is missing, or is untrusted. This item will be shown only if you have the validation premium feature enabled.
Weak protocol Certificate installation that is less than TLS 1.2.
Offline Certificate installations that haven’t been seen by Venafi Cloud in the last 30 days.

Certificates and Installations Summary

Item Description
Online Certificates discovered by Venafi Cloud in the last 30 days.
Newly discovered Certificates discovered by Venafi Cloud in the last 60 days.
Issued Certificates issued by Venafi Cloud in the last 60 days.

Applications Certificate Expiration

This report shows expiring certificates assigned to the applications or organization units of the signed-in user. This report is application-focused rather than certificate-focused.

Premium subscribers can add additional recipients. The additional recipients will receive the same report as the signed-in user that configured the notification.


A user with User ID signs in to and enables this notification. She then adds User ID as a recipient. When sends the email, will receive the report that shows the status of's applications and organizational units.

Configuring notifications

  1. Click your user profile in the top right corner.

  2. Click Preferences.

  3. In the left pane, click Notifications.

  4. Click the slider to the Enabled position for each notification you want to receive.


    The Machine Identity Digest notification is available only to Premium subscribers.

  5. Expand each notification that you've enabled.

  6. Set the email frequency and interval.

  7. (Premium feature) Add email addresses for those who should receive the notification.


    You can add any email address to the distribution list. Users don't have to be registered with to receive the email.

  8. Click Save.

Last update: November 9, 2021