ManageEngine, the enterprise IT management and security division of Zoho Corporation, has announced a major enhancement to its Key Manager Plus platform, introducing post-deployment automation for TLS certificates. The new capability completes the certificate life cycle management process by automating deployment and renewal tasks that have traditionally required manual intervention.
The update enables organizations to automate the final stages of certificate renewal, including deploying certificates to target servers, executing configured scripts, restarting dependent services, and sending stakeholder notifications. With this addition, enterprises can now achieve end-to-end certificate life cycle automation across discovery, renewal, deployment, and post-deployment activities.
The announcement comes as organizations worldwide prepare for significantly shorter TLS certificate validity periods. Following decisions by the CA/Browser Forum, the maximum validity period for public TLS certificates is being reduced from the traditional 398 days to 200 days, with further reductions planned to 100 days by 2027 and 47 days by 2029.
“Certificate renewal is rarely the hard part. The work that piles up on teams is what comes after it, at scale: pushing certificates to the server, restarting the services, and confirming they actually went live. With Key Manager Plus, we are eliminating the last manual step in the life cycle management loop.”
Vasudevan Seshadri, Director of Product Management, ManageEngine
According to ManageEngine, shrinking certificate lifespans will dramatically increase renewal frequency, making manual processes increasingly difficult and costly to sustain. As enterprises manage growing numbers of certificates across complex IT environments, automation is becoming essential to reduce operational overhead and minimize the risk of outages caused by expired or improperly deployed certificates.
In addition to the automation enhancements, ManageEngine has launched a dedicated 47-Day TLS Impact Calculator. The tool helps organizations assess the operational impact of shorter certificate validity periods by analyzing certificate volumes, renewal effort, and potential outage exposure, while highlighting the benefits of automated certificate management.
The updated Key Manager Plus platform offers complete feature parity across on-premises and cloud deployments, supporting organizations as they modernize machine identity and certificate management strategies.
With the latest release, ManageEngine aims to help enterprises simplify certificate operations, strengthen security posture, and prepare for the industry’s transition toward more frequent certificate renewals through fully automated, CA-agnostic certificate life cycle management.
