Automated SSL Certificate Renewal

What is a one sentence summary of your feature request?

Automate SSL certificate renewal with various Certificate Authorities including Let’s Encrypt

Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

SSL certificate maximum validity periods are decreasing to 200 days in 2026, 100 days in 2027, and ultimately down to 47 days in 2029. The need for automated renewal processes has become critical to maintaining secure and uninterrupted access to management consoles, web interfaces, etc.

Currently, Endpoint Protector requires manual renewal and replacement of SSL certificates, which introduces administrative overhead, increases the risk of expired certificates, and can result in service disruption or compliance issues.

Proposed Enhancement:
Introduce automated certificate management capabilities within Endpoint Protector, allowing administrators to:
-Automatically request, install, and renew SSL/TLS certificates directly from a supported CA (starting with Let’s Encrypt).
-Configure renewal intervals and pre-expiry notifications.
-Support both HTTP-01 and DNS-01 validation methods for domain verification.
-Expose an API endpoint for installing a new SSL certificate
-Optionally integrate with enterprise PKI or custom CA endpoints in future releases.

Benefits:
-Reduces manual administrative effort and human error.
-Ensures continuous SSL/TLS protection without service downtime.
-Improves compliance with modern security and automation best practices.
-Provides a seamless, zero-cost certificate management solution through Let’s Encrypt integration.

How do you currently solve the challenges you have by not having this feature?

Request new certificate internally and add it to the console before the existing certificate expires.

1 Like

Hi Jacob,

Thank you for being part of the Netwrix Community!

We will review this scenario and get back to you with updates as soon as possible.

Regards,
Simona

1 Like

Hi @jacob.edwards,

Thank you once again for sharing your valuable feedback on Endpoint Protector!

We’re excited to let you know that this topic is now on our radar! Our teams will be reviewing it further, and there’s a strong chance it will make its way into the product. That said, as we’re still in the early stages of investigation and design, we’re not able to provide an exact ETA just yet.
Rest assured, in the investigation process, your ideas will be surely taken into consideration!

Once we make progress, we’ll keep you updated accordingly.

All the best,
Simona

1 Like