Device certificate expiry detection
Device certificate expiry detection is a monitoring feature that
-
actively monitors the expiration status of management certificates and Cisco Secure Client certificates
-
notifies users when these certificates are nearing their expiration date or have expired, and
-
prevents disruptions in device operations due to certificate expiry.
Certificate monitoring scope and functionality
The management certificate is used for accessing FDM-managed and ASA devices from Security Cloud Control Firewall Management, while the Cisco Secure Client (formerly AnyConnect) is necessary for using virtual private network features on ASA, FDM-managed, and FTD devices from Security Cloud Control Firewall Management.
The management certificate expiry check applies to ASA and FDM-managed devices, while the Secure Client certificate expiry check applies to ASA, FDM-managed, and FTD devices.
View certificate expiry notifications
In the top right corner, click the Notifications ( 
) icon to view the most recent alerts that have occurred or affected the devices you have onboarded to your tenant. The High Priority section displays the certificate expiration notifications.
These notifications are sent 30, 14, and 7 days before the certificate expiration date and then every day thereafter until the certificate either expires or is renewed with a valid certificate. You can also subscribe to receive these notifications by email on the Notification Settings section of the user preferences page. For more information, see User Notification Preferences.