Azure Deployment — Certificate Expiry Agent
Deploy Securetron PKI Trust Manager Certificate Expiry Monitoring Agent To Azure Cloud
This tutorial guides you through deploying the Securetron PKI Trust Manager Certificate Expiry Agent to the Azure Cloud environment. You will configure container app settings, registry details, ingress rules, and complete the deployment process. The Certificate Expiry Agent provides automated monitoring and notification of any certificates that are about to expire. A critical service to prevent outages!
Azure Portal#
1. Select Container App Option#
Click the Container App option to initiate creating a new container application.
2. Access Container App Name Field#
Click the container app name field to specify the name for your new container app. Enter your container app name to identify the deployment such as pki-trust-manager-cert-expiry-agent
3. Proceed To Container Settings#
Click Next to move forward to configuring container-specific settings.
4. Registry Login Server#
Enter the registry login server address, such as securetron.azurecr.io to connect to the securetron container registry.
5. Image & Tag#
Enter the Image and Tag such as certexpired:latest
6. Choose .NET Stack#
Select the .NET development stack to optimize the container.
7. Environment Variables#
Enter the Environment variables such as ConnectionStrings__OurDBContext, to link your app to the database. Additional variables are listed in the document.
Recommended
-
CertExpiryNotificationPeriod__StartScanningRangeInXdays=${EXPIRY_START_RANGE:-3}
-
CertExpiryNotificationPeriod__EndScanningRangeInXdays=${EXPIRY_END_RANGE:-3}
-
CertExpiryNotificationPeriod__SendingNotificationEveryXdays=${EXPIRY_NOTIFY_INTERVAL:-1}
-
CertExpiryNotificationPeriod__ScanningIntervalEveryXminutes=${EXPIRY_SCAN_INTERVAL:-30}
-
Smtp__Server=Your_SMTP_Server_FQDN
-
Smtp__Auth=true
-
Smtp__SenderName=PKI-Trust-Manager-CertAPI
-
Smtp__SenderAddress=[email protected]
-
Smtp__ReceiverAddressOnError=[email protected]
-
Smtp__ReceiverAddressOnEvent=[email protected]
-
Smtp__Port=Your_SMTP_Server_Port
-
Smtp__Username=Your_SMTP_Username
-
Smtp__Password=Your_SMTP_Password
-
Smtp__EnableSsl=true
8. Proceed To Ingress Settings#
Click Next to configure network traffic and access rules for your container app.
9. Enable Ingress#
Turn on ingress to allow your container app to receive network traffic.
10. Enable Traffic Acceptance#
Turn on the setting to accept traffic from all sources for your container app.
11. Enable Session affinity#
Enable Session affinity to ensure connection persistence
12. Proceed To Tags Section#
Click Next to add metadata tags for organizing your container app.
13. Go To Review And Create#
Click Next to review your configuration before deployment.
14. Confirm Validation Passed#
Passed should be displayed that confirms your container app configuration has no errors.
15. Initiate Container App Creation#
Click Create to start deploying your configured container app to Azure.
16. Confirm Deployment Completion#
Your deployment should complete and your container has been successfully deployed
17. Access Deployed Resource#
Click Go to resource to open the deployed container app's resource page.
18. Open Application URL#
Click Application Url to view the public endpoint of your deployed container app.
19. Switch To Application Tab#
Switch to the browser tab displaying your container app's URL. You should see the on-screen message
20. View Health Status Response#
add forward slash health to the URL and hit enter. This should provide the health of the container
You have successfully deployed the Securetron PKI Trust Manager Certificate Expiry Monitoring Agent to Azure Cloud by configuring container settings, registry access, ingress rules, and completing the deployment. The Certificate Expiry Monitoring Agent is your primary assistance in reviewing certificates and notifying so that action can be taken to automate renewal or have the certificate renewed manually priot to an outage. For more information please visit our website at https://securetron.net or contact support.