JumpCloud’s certificate management service provides IT Admins with a single point of visibility and control over all certificates, thereby effectively eliminating the current challenges associated with manual tracking and management. This centralized approach significantly enhances security and efficiency by automating the certificate lifecycle, reducing manual effort, ensuring timely revocation of any compromised certificates, and ultimately strengthening the organization's overall security posture. Furthermore, the system improves accessibility as both users, who can download their certificates from a dedicated portal, and administrators, who can generate and share certificates from an Admin portal, benefit from a streamlined process that allows the entire system to easily scale.

Creating a Certificate Authority

1. Log in to the JumpCloud Admin Portal.

2. Go to Security > Certificate Authority. The Certificate Authority page is displayed.
3. Go to Root Certificates tab and click Add CA to create a root certificate.
4. The newly created root certificate contains the following details:
   1. Common Name
   2. Serial Number
   3. Validity Period
   4. Expires 

Generating a Certificate for a User

You can assign a certificate to a specific user by the following:

1. On the Certificate Authority page, select an organization name and click arrow icon in the Actions column. 
2. On this page, click +Add. A list of all available users is displayed.
3. Select one or multiple users to whom you want to assign the certificate.

Revoking Certificates

You can revoke certificates for individual entities by the following:

1. On the Certificate Authority page, select an organization name and click arrow icon. 
2. On this page, click +Add. A list of all available users is displayed.
3. Select one or more users and click Revoke. A dialog box will appear, prompting you to provide a reason for the revocation.
4. Click Revoke. A success message is displayed.

Enabling Self‑Service

1. On the Certificate Authority page, select an organization name and click arrow icon. A list of all available users is displayed.
2. On this page, click Settings. The Settings pop-up window is displayed.
3. On the pop-up window, select the Allow Self-Service Portal Certification checkbox to grant all users access to the Self-Service Certification feature via their User Portal. This is unchecked by default.
4. Click Save.