Documentation

Installing and running certmon, the Windows service that continuously monitors your Microsoft PKI, server and device certificates and alerts you in time.

certmon is in beta. This documentation describes the current beta version; questions and feedback are welcome at mail@247-it.com.

• Installation and setup

  Requirements, firewall, service account, permissions, setup (also silent), initial setup, update, backup and troubleshooting.

• JEA endpoint for Windows servers

  How certmon reads Windows servers only through a restricted PowerShell endpoint: setup, permissions, testing.

• Notifications

  Alert logic, email over SMTP or Microsoft 365, Microsoft Teams and webhooks with an HMAC signature.

• Findings

  Every finding id with its meaning and severity: network scan, PKI and Windows servers.

• Windows event log

  Event ids of the certmon source for RMM and SIEM systems, with query examples.

Hands-on guides for certificates on Windows servers are in the guides.