How-To Group functions in CertMine

To open group management, please proceed as follows:

1. Click on your account in the menu bar.
2. Click on “Manage groups” in the menu that opens.

In group management, the following steps must be performed to create a subgroup of an existing group:

1. In the “Create subgroup” section, select the parent group.
2. Enter the group name. It may consist of letters, numbers, and hyphens.
3. Optionally, an email address for the group can be specified to which all emails regarding the group's certificates will be sent in addition to the requester.
4. Clicking on “Create group” will create the group immediately.

The full name of a new subgroup consists of the name of the parent group followed by a period and the name of the subgroup. So if the parent group is “test.it” and the group name is “loadbalancer,” the full group name is “test.it.loadbalancer.”

The active group determines which certificates are visible and for which group new certificates are requested.

1. Click on your own account in the menu.
2. Then select the group from the list and click on it.

Open the group page of a group as described above.

1. In the first field, you can customize the group name.
2. In the second field, you can customize the group's email address.
3. Under “Users,” you can select which accounts from the corresponding base group should be members of this group.
4. Once you have made all the necessary adjustments, please click on “Customize group.”

Adjustments to base groups are not possible.

On the respective group page, please click on the “Create new account” button on the right-hand side (see above) to generate a key.

Note: Ensure that the entire process remains confidential, i.e., that it is carried out on a secure device and that no unauthorized persons are present and no AI tools such as Copilot Vision or Recall are active.

1. Please save the Key ID (KID) and HMAC key immediately in encrypted form, e.g., in a secure password safe or an Ansible vault.
2. Enter the domain names that are valid for this ACME account. In the first input field, the prefix can contain letters, numbers, the period (“.”), the hyphen (“-”), and a single asterisk (“*”) as a placeholder for any valid character.
3. Select the suffix of the valid domain name from the list in the right-hand input field.
4. Enter an optional note for this account, e.g., describing the use of the account.
5. Read the instructions carefully and then click the box to the right of “Confirm instructions.”
6. Activate the account by clicking on “Activate account.”

The account is then ready for immediate use and certificates can be requested via it.