Browse docs

Certificate Management

In addition to the Built-In CA for automatically issued certificates, Relution offers two further views for certificate management: Certificates for manually uploaded certificate files, and Issued Certificates for an overview of certificates installed on devices.

Certificates (manually uploaded)

Under Settings → Certificates, you can upload and manage existing certificate files (e.g. crt, cer, pfx/pkcs12, pem).

Required fields when uploading

  • Name

    Name of the certificate.

  • Certificate file

    The certificate file to upload.

Optional

  • Password

    Password for the certificate file, if encrypted.

An uploaded certificate can then be selected in many policy configurations as a generic certificate — similar to a Built-In CA certificate template, but without automatic per-device issuance. Typical use cases include VPN, Wi-Fi (EAP-TLS), and Exchange/email configurations, as well as Windows and Android Enterprise certificate configurations.

Issued Certificates (Device Certificates)

Under Settings → Issued Certificates, you see an overview of all certificates automatically issued for a device by a certificate policy (Built-In CA/SCEP) — including the certificate, device, certificate template used, certificate authority, and issuance, expiry, and (if applicable) revocation dates.

Manual issuance is not possible from this view — certificates are only created as the result of an enrollment or policy process. Two actions are available:

  • Delete: Removes the entry from Relution. Not possible if the certificate must be revoked instead.
  • Revoke: Revokes the certificate via the certificate revocation list (CRL) of the associated certificate authority. You select a revocation reason (e.g. key compromise, CA compromise, affiliation changed, superseded, cessation of operation, privilege withdrawn).

Important: Revocation is a genuine PKI operation — Relution signs an updated revocation list (CRL) afterwards, which devices retrieve and check via the distribution point stored in the certificate. This action cannot be undone.