Usage & Operations

Usage & Operations

This guide covers the day-to-day operations of managing SSL-CLM.

The Dashboard

When you log in, you are greeted by the Dashboard. It provides an immediate health check of your PKI.

• Expiry Timeline: A bar chart showing how many certificates expire in the next 30, 60, 90 days.
• Compliance Score: A letter grade (A-F) based on your adherence to policies (e.g., “0% SHA-1 usage”).
• Critical Alerts: A red list of certificates that are expired or revoked but still in use.

Managing Certificates

Searching

The Inventory tab is your search engine.

• Filters: “Expires in < 30 days”, “Issuer = Let’s Encrypt”, “Key Size < 2048”.
• Export: Download the filtered list as CSV/JSON for audit reporting.

Manual Actions

While automation is the goal, manual control is always available.

• Renew Now: Trigger an immediate renewal workflow.
• Re-Issue: Keep the same key but get a new certificate (useful if subject details change).
• Download: Get the .pfx or .pem file directly (requires permissions).

Managing Agents

Under Infrastructure > Agents, you can see the health of all deployed agents.

• Status: Online (Green) or Offline (Red).
• Version: Ensure all agents are running the latest version.
• Jobs: View running and failed jobs for specific agents.

Reporting

SSL-CLM includes built-in reports:

• Executive Summary: High-level PDF for C-suite with aggregate metrics.
• Expiry Report: Detailed list of upcoming expirations.
• Vulnerability Report: List of certificates using weak crypto (SHA-1, 3DES).