The Certificate Monitoring extension is able to detect certificates in three ways:
- Using data provided by the OneAgent, the extension can compile a list of listening ports on a host. The extension will then use this data to attempt to establish secure connections with those ports. If successful, the extension would then read the certificate data.
- On OneAgent equipped hosts running Windows, the extension can read the Windows Certificate Store and collect information on certificates it finds there.
- Using the extension deployed on an ActiveGate, users can provide a list of domain names. The extension will then attempt to connect and extract any available certificate data.
Can you explain a bit more about your deployment? You mention that your server are deployed in a cloud environment. Are these servers VM running with an OneAgent? If so, the extension should be able to detect certificates present on those hosts.
If the servers are running in containers there is a limitation. The version of the OneAgent that runs in containerized environments lacks the Extension Execution Controller so the Extension cannot run in this scenario.
