Certificates and Credentials

This guide includes the following topics:

• Certificate Types
• Managing Certificates with the Ops Manager API
• Overview of Certificate Rotation
• Checking Expiration Dates and Certificate Types
• Overriding Duration for Certificates
• Rotating CAs and Leaf Certificates
• Rotating Non-Configurable Leaf Certificates
• Rotating Configurable Leaf Certificates
• Rotating the Services TLS CA and Its Leaf Certificates
• Rotating Identity Provider SAML Certificates
• Custom Certificate Authorities
• Retrieving Credentials from Your Deployment
• Using Short-Lived NATS Bootstrap Credentials
• CredHub-Managed Certificates and Credentials
  • CredHub
  • CredHub Credential Types
  • Reviewing and Resetting Manually Set Certificates in BOSH CredHub
  • Getting Started with CredHub Maestro
  • Advanced Certificate Rotation with CredHub Maestro
  • CredHub Maestro Tile Compatibility
  • Troubleshooting CredHub Maestro Safety Violations During Certificate Rotation