Alerts and Notifications
In SecTrail CM, you can monitor certificate expiration status, receive automatic notifications when critical deadlines approach, and create alarm configurations.
You can access alarm and notification features in the application panel through the following paths:
- Discovery → Expiry List & Alarm - Certificate alarm list and configuration
Alarm List
The alarm list allows you to track the status of certificates approaching expiration with color-coded visualization.
Expiration Status Alarm List
List Information
The following information is displayed for each certificate in the alarm list:
- Subject - Certificate's Common Name (CN) information
- Subject Alternative Names - Certificate's SANs (DNS names) list
- Serial Number - Certificate serial number
- Expire - Certificate expiration date and time
- Host - Server address and port information where the certificate is located
- Issuer - CA (Certificate Authority) that signed the certificate
- Network Type - Certificate's network type category (External, Internal, etc.)
- Alert Days - Number of days remaining until certificate expiration
Alarm Color Codes
Certificate expiration status is shown with color codes in the Alert Days column:
| Color | Status | Description |
|---|---|---|
| 🔴 Red | Critical (0-7 days) | Certificate will expire within 7 days or has expired |
| 🟠 Orange | Warning (8-30 days) | Certificate will expire within 8-30 days |
| 🟡 Yellow | Attention (31-90 days) | Certificate will expire within 31-90 days |
Certificates shown in red require urgent action. These certificates must be renewed or updated before expiration.
List Operations
From the toolbar at the top of the page, you can perform the following operations:
- Show X entries - Set the number of records to display per page
- Search - Search by certificate information
- Alarm Configuration - Navigate to the alarm configuration page
Alarm Configuration
On the Alarm Configuration page, you can customize certificate expiration notifications and set automatic notification times.
You can access alarm configuration settings from the Alarm Configuration tab on the Discovery → Expiry List & Alarm page.
Alarm Configuration Page
Configuration Settings
| Parameter | Description | Options |
|---|---|---|
| Track If Certificates Expires In | Determines how many days in advance to start tracking certificate expiration | Enter number of days |
| Send Notification If Certificates Expires In | Set time periods for sending automatic notifications | • Number of days: How many days before to send notification • Period: Daily or Weekly • Day: Which day for weekly notifications • Hour: What time to send the notification |
| Send Self-Signed Certificate | Should notifications be sent for self-signed certificates? | • Yes: Notify for self-signed as well • No: Exclude self-signed |
| Public Dashboard Threshold | Threshold value for certificates to display on public dashboard | Enter number of days |
Self-signed certificates are typically used in test environments or internal systems. Using certificates signed by trusted CAs in production environments is recommended.
Saving Configuration
After making all settings, click the Submit button to save the configuration.
After the configuration is saved, automatic notifications will start being sent at the specified periods.
Notification Integrations
SecTrail CM can send alarm notifications through different channels:
- Email - Automatic notification delivery to specified email addresses
- SNMP Trap - Alarm delivery to network management systems via SNMP protocol