# Need help on SSL Certificate Monitor extension

**URL:** <https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017>\
**Category:** Extensions\
**Tags:** extensions\
**Created:** [August 5, 2024, 9:56pm UTC](https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017 "2024-08-05T21:56:01Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ecataldo03](https://avatars.discourse-cdn.com/v4/letter/e/c6cbf5/32.png) [@ecataldo03](https://community.dynatrace.com/u/ecataldo03)\
**Post date:** [August 5, 2024, 9:56pm UTC](https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017/1 "2024-08-05T21:56:01Z")

</div>

Hello Everyone:

We have the SSL certificate extension installed. Is there a way to perform a auto-discovery of all the certificates installed in our environment?.

Regards.

---

<div class="post-metadata">

**Author:** ![p\_devulapalli](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/p_devulapalli/32/41590_2.png) [@p\_devulapalli](https://community.dynatrace.com/u/p_devulapalli)\
**Post date:** [August 6, 2024, 5:53am UTC](https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017/2 "2024-08-06T05:53:38Z")

</div>

I think you need to have a OneAgent running on the host to have the certificate auto discovered or you would need to use the ActiveGate domain based discovery

---

<div class="post-metadata">

**Author:** ![ben\_davidson](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/ben_davidson/32/20391_2.png) [@ben\_davidson](https://community.dynatrace.com/u/ben_davidson)\
**Post date:** [August 6, 2024, 1:22pm UTC](https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017/3 "2024-08-06T13:22:15Z")

</div>

[p\_devulapalli](https://community.dynatrace.com/user/21657)&nbsp;is correct. Certificate auto-discovery requires the SSL Certificate Extension to be enabled locally on OneAgent monitored hosts. The extension uses data collected by the OneAgent to help identify certificates on the host. We recommend deploying the extension using a limited deployment (filter on a management zone, tag, etc) to first to test the extension before deploying it environment wide.

---

<div class="post-metadata">

**Author:** ![RTT](https://avatars.discourse-cdn.com/v4/letter/r/779978/32.png) [@RTT](https://community.dynatrace.com/u/RTT)\
**Post date:** [January 30, 2025, 7:20am UTC](https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017/4 "2025-01-30T07:20:36Z")

</div>

Would Infrastructure monidoing mode be sufficient to perform&nbsp;Certificate auto-discovery on the monitored hosts with OneAgent. Or is full-stack monitoring needed?

---

<div class="post-metadata">

**Author:** ![p\_devulapalli](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/p_devulapalli/32/41590_2.png) [@p\_devulapalli](https://community.dynatrace.com/u/p_devulapalli)\
**Post date:** [January 30, 2025, 10:41pm UTC](https://community.dynatrace.com/t/need-help-on-ssl-certificate-monitor-extension/47017/5 "2025-01-30T22:41:27Z")

</div>

[@RTT](https://community.dynatrace.com/user/86050)&nbsp;You should be able to monitor certificates in “Infrastructure Only” mode