Secrets Vault

Name	Type	Created	Last Accessed	Rotation Status	Actions
Loading secrets...

Timestamp	User	Action	Secret Name	Details
Loading audit log...

Certificate Stores

Subject	Thumbprint	Issuer	Valid From	Expires	Status	Actions
Select a store and click Refresh

All Certificate Stores

Store	Subject	Thumbprint	Expires	Status	Actions
Click “Scan All Stores” to begin

⚠ Expiring / Expired Certificates

Within

Store	Subject	Expires	Days Left	Status	Actions
Click “Check Now” to scan

🔧 Certificate Wizard

1 · Choose Operation

2 · Configure

3 · Review & Run

4 · Result

📄

Self-Signed Cert

Generate a new self-signed certificate using PowerShell

📦

Export PFX

Export an existing cert + private key to a PFX / PKCS#12 file

📥

Import PFX

Import a PFX into the Windows certificate store

🔍

Verify / Inspect

Run certutil to inspect and verify a PFX or certificate file

🗑

Delete Cert

Remove a certificate from a Windows store by thumbprint

📄

Generate CSR

Create a Certificate Signing Request (CSR) to submit to a CA

📹

Export CER / PEM

Export a cert (public only) as a .cer / .pem file

Review Command

☁ App Services Certificate Bindings

Enter a subscription ID and click Load

🔄 Application Gateway Certificate Bindings

Enter a subscription ID and click Load

🔒 Key Vault Certificates

Enter a Key Vault URL and click List

Sync Local Cert → Key Vault

Thumbprint

Cert Name in KV

📝 Certificate Audit Log

Loading…

🌎 Akamai CDN Certificate Management

API Credentials

Akamai EdgeGrid

Host

Client Token

Access Token

Client Secret

AWS Route 53

Access Key ID

Secret Access Key

Region

Hosted Zone ID

CPS Enrollments — Edge Certificates

ID	CN / SAN	Type	Validation	Status	Expires	Actions
Enter a Contract ID and click List Enrollments

Enrollment Details

📤 Upload 3rd-Party Certificate to CPS

Certificate (PEM)

Trust Chain (PEM, optional)

🌎 Route 53 — DNS Validation & CNAME Management

Add CNAME Validation Record

CNAME Name (Akamai DV token)

CNAME Value (Akamai DV destination)

Add Origin CNAME Record

Origin Hostname

Target (backend / ELB)

Region

Check / Verify CNAME

🎉 Origin Certificates — Azure Key Vault

🌎 CTRL (Control)

Primary / failover region

No cert loaded

🌎 EAST

Eastern region origin

No cert loaded

🌎 WEST

Western region origin

No cert loaded

Cert Name	Expires	Status	Assign to
Loading…

1 · Configure

2 · Scan

3 · Validate

4 · Acknowledge

5 · Summary

⚙ Sprint Scan Configuration

Set the contracts to scan and thresholds. Contract IDs and zone are pre-filled from your saved credentials.

Contract ID(s) *

Multiple contracts: comma-separated

Route 53 Hosted Zone ID *

Checked when validating CNAME records

SAN Capacity Warning Threshold

Max 99 SANs per enrollment

Cert Expiry Warning Window (days)

🔍 Enrollment Triage

Scanning…

■ Needs DV validation (in progress) ■ Expiring soon ■ Near SAN capacity ■ OK

ID	CN	Contract	Status	DV?	Expires	SANs	Flags	Action
Click "Scan All Contracts" from Step 1 to begin

🌎 DV Challenge Validation

Each enrollment requiring DV re-validation is listed below. Check if the CNAME exists in Route 53 — add it if missing — then proceed to acknowledge.

No enrollments requiring DV validation found (or scan not yet run)

✓ Acknowledge DV Completions

These enrollments have CNAME records in Route 53 and are ready for Akamai to acknowledge. Unchecking excludes an enrollment from this batch.

No enrollments ready to acknowledge (run scan + validation first)

📋 Sprint Summary

Run this each Sprint (every ~2 weeks). Screenshot or copy below for your cert-check ticket.

Enrollment ID	CN	Status	DV	SANs	Expires	Result
Run a scan to populate summary

Certificate Stores

All Certificate Stores

⚠ Expiring / Expired Certificates

🔧 Certificate Wizard

Review Command

☁ App Services Certificate Bindings

🔄 Application Gateway Certificate Bindings

🔒 Key Vault Certificates

Sync Local Cert → Key Vault

📝 Certificate Audit Log

🌎 Akamai CDN Certificate Management

API Credentials

Akamai EdgeGrid

AWS Route 53

CPS Enrollments — Edge Certificates

Enrollment Details

📤 Upload 3rd-Party Certificate to CPS

🌎 Route 53 — DNS Validation & CNAME Management

Add CNAME Validation Record

Add Origin CNAME Record

Check / Verify CNAME

Zone Records

🎉 Origin Certificates — Azure Key Vault

Key Vault — Available Origin Certs

⚙ Sprint Scan Configuration

🔍 Enrollment Triage

🌎 DV Challenge Validation

✓ Acknowledge DV Completions

📋 Sprint Summary

Stored Secrets

Audit Log

Certificate Stores

All Certificate Stores

⚠ Expiring / Expired Certificates

🔧 Certificate Wizard

Review Command

☁ App Services Certificate Bindings

🔄 Application Gateway Certificate Bindings

🔒 Key Vault Certificates

Sync Local Cert → Key Vault

📝 Certificate Audit Log

🌎 Akamai CDN Certificate Management

API Credentials

Akamai EdgeGrid

AWS Route 53

CPS Enrollments — Edge Certificates

Enrollment Details

📤 Upload 3rd-Party Certificate to CPS

🌎 Route 53 — DNS Validation & CNAME Management

Add CNAME Validation Record

Add Origin CNAME Record

Check / Verify CNAME

Zone Records

🎉 Origin Certificates — Azure Key Vault

Key Vault — Available Origin Certs

⚙ Sprint Scan Configuration

🔍 Enrollment Triage

🌎 DV Challenge Validation

✓ Acknowledge DV Completions

📋 Sprint Summary

📄 Certificate Details

Add Secret

View Secret

Version History

Confirm Deletion

Rotation Status Check