Specify Renewal time

Question Scripting
1

Hey Chaps,

Your app is legendary, our renewal process with your app, ps scripts and uploading to Azure Key Vault and then running ps scripts on there for our app services works so well :grinning:

I have a question around timing for auto renewal. I saw someone previously posting about this and you mentioned in your post that you were building a feature for a Deferred Deployment option, is that coming in soon? I currently run version 5.3.2.0 . Obviously reasoning behind this is I want to sync the time of renewal and tasks happening on our server using CertifyTheWeb with our scheduled tasks running on Azure.

Is the other option you specified previously to just have ā€œCert Store Onlyā€ deployment option and then move my deployment tasks to windows scheduled tasks? Iā€™ll be keep my ā€œUpload To Azure Key Vaultā€ task as that wonā€™t effect our process but cert binding tasks etc I will have to move.

Thanx in advance

1 Like
2

If you already have deployment tasks configured in Cerify and you want to control when they are runā€¦ just set the trigger to Manual (run using UI or command line).

A commandline box will appear that you can copy into Windows Task Scheduler pointing at Certify.exe. This way you donā€™t have to rip out any already working tasks. You just trigger when they run differently.

Iā€™ve never done this, but Iā€™m 90% sure this is how it works. I think the certify in the box is the EXE name and not part of the arguments you give Task Scheduler.

1 Like
3

@jljtgr is exactly right. So ideally you want your actual cert renewals to happen when they can (as you cannot rely on services like Letā€™s Encrypt to always issue a certificate when you want it to - their service can be down etc). So you shouldnā€™t wait for your maintenance window before attempting that.

For scheduled deployment, deployment to any services that need restarted can be controlled using your own scheduled task or run manually during a planned maintenance window.

Note that auto deployment to IIS is only part of the standard deployment and canā€™t currently be deferred like other task can.

4

Aah OK I see. Thanx for info chaps :+1:, Iā€™ll play around with these options in our test environments.

1 Like