Inventory Management

This guide explains step-by-step how to manage certificate inventory in SecTrail CM, import certificates, manage CSR (Certificate Signing Request), and track certificate lists.

About the Feature

Inventory management allows you to view a centralized list of certificates signed through SecTrail CM and certificates imported from external sources. For certificates found through discovery, review the Discovery Configuration page.

Certificate List

View and manage all imported and discovered certificates in a centralized list.

Access Path

To access the certificate list: Go to Inventory → Certificate List menu.

Certificate List - All Certificates and Their Status

List Information

The following details are displayed for each certificate in the certificate list:

Column	Description
Identifier	Auto-generated unique identifier for the certificate
Created At	Date and time the certificate was added to the system
Subject	Certificate subject information (CN, O, OU, C, ST, L)
Certificate Type	Certificate type (CERT/KEY, Certificate, CSR)
Issued By	CA (Certificate Authority) that signed the certificate
Not Before	Certificate validity start date and time
Not After	Certificate validity end date and time
Status	Certificate management status: Managed (Managed) or Monitored (Monitored)
Password	Certificate private key password

Certificate Statuses

Each certificate has a status indicator on the left:

Icon	Status	Description
🟢	Active	Certificate is valid and active
🟡	Expiring Soon	Certificate will expire soon
🔴	Expired	Certificate has expired

Available Operations

Top Menu Operations

• Show 10 rows - Set number of certificates to display per page
• Selection - Select certificates for batch operations
• Export - Export certificate list (CSV, Excel, PDF)
• Import - Import new certificate
• Revoke - Revoke selected certificates
• Delete - Delete selected certificates
• Download - Download selected certificates in different formats (Zip, Pfx, Jks, Cer, Chain, Bundle, Der, P7b, Key)
• Last - View recently added certificates
• Show/Hide Columns - Customize displayed columns

Filtering and Search

You can search each column in the list and adjust the number of records displayed per page.

Row-Based Operations

You can perform view, download, delete, and detail view operations on each certificate row.

Batch Operations

You can select multiple certificates to perform Export, Download, Revoke, or Delete operations in bulk.

Caution

Revoke operation revokes the certificate from the CA and is irreversible. Delete operation only removes it from SecTrail CM inventory.

CSR List

You can view and manage all certificate requests (CSR) in a centralized list.

Access Path

To access the CSR list: Go to Inventory → CSR List menu.

CSR List - Certificate Requests

List Information

The following information is displayed for each record in the CSR list:

Column	Description
Identifier	Auto-generated unique identifier for the CSR
Created At	Date and time the CSR was created
Subject	Subject information in the CSR (CN, O, OU, C, ST, L)
E-Mail Address	Email address defined in the CSR
Certificate Type	CSR type (usually CSR)
Password	CSR private key password (shown hidden if exists)

Available Operations

Top Menu Operations

• Show 10 rows - Set number of records to display per page
• Selection - Select CSR for batch operations
• Export - Export CSR list
• Import - Add new CSR
• Delete - Delete selected CSRs
• Download - Download selected CSRs

Filtering and Search

You can search each column in the list and adjust the number of records displayed per page.

Row-Based Operations

You can perform view, download, and delete operations on each CSR row.

Certificate Import

SecTrail CM offers flexible import options that support different certificate types and sources.

Access Path

To import certificates: Go to Inventory → Import Certificate in the application panel.

Certificate Import Screen

Certificate Types

You can select one of the following certificate types on the import screen:

Type	Description	Use Case
Cert&Key	Certificate and private key together	For importing existing active certificates and keys
Certificate	Certificate file only	For monitoring purposes or adding certificate only without key
CSR	Certificate Signing Request	For creating and managing certificate requests
PKCS12	Certificate and key packaged in PKCS#12 format	For certificates exported from Windows or Java environments

Cert&Key Import

Used to import certificate and private key together.

Configuration Parameters

Parameter	Description	Options
Certificate Type	Select data type to import	Select Cert&Key
Source	Determine how to provide certificate and key	• Upload File: File upload • Paste Text: Paste text
Custom Certificate File	Upload certificate file	In .crt, .cer, .pem formats
Custom Key File	Upload private key file	In .key, .pem formats
Custom Chain File	(Optional) Certificate chain file	For Intermediate and Root CA certificates
Key Security	Determine key security level	• Normal: Unencrypted key • Password: Encrypted key (passphrase required)
Key Import	Select where the key will be stored	• Key: In SecTrail CM database • Database: Store in separate database
Add to Managed-Manual List	Add certificate to managed list	Check for manual management

Important

• Use Custom Chain File to add Intermediate CA and Root CA certificates
• For encrypted keys, select Password in Key Security field and enter password
• Key Import option is important for secure key storage

Steps

1. Select Cert&Key as Certificate Type
2. Select Upload File or Paste Text as Source
3. Upload certificate, key, and chain files via Browse buttons or paste their contents
4. If key is encrypted, select Key Security Password and enter password
5. Select Key Import method (Key or Database)
6. Optionally check Add to Managed-Manual List option
7. Click Import button to complete the import

Certificate Import

Used to import certificate file only (without private key).

When to Use?

• When adding public certificates for monitoring purposes
• For certificates that will only be monitored
• For third-party certificates you don't have the private key for

Configuration

Select Certificate as Certificate Type and upload only the certificate file. Other steps are the same as Cert&Key.

CSR Import

Used to import Certificate Signing Request (CSR) files.

What is CSR?

Certificate Signing Request (CSR) is a special file used when requesting an SSL/TLS certificate from a Certificate Authority (CA). CSR contains domain name, organization information, and public key.

Configuration

1. Select CSR as Certificate Type
2. Upload your CSR file or paste its content
3. Click Import button

PKCS12 Import

Imports certificates and keys packaged in PKCS#12 format.

What is PKCS12?

PKCS#12 (usually with .pfx or .p12 extension) is a format that packages certificate, private key, and chain in a single file. It's commonly used when exporting from Windows IIS and Java Keystores.

Configuration

1. Select PKCS12 as Certificate Type
2. Upload .pfx or .p12 file
3. Enter PKCS12 file password (if exists)
4. Click Import button