Home
SSH
Control SSH access and key rotation at scale with an SSH key lifecycle management solution.
SSH User Guide
Managing Host Key and User Key Inventories
Independent Certificate Renewal
Administrators can renew an expiring SSH certificate from Certificate Inventory without rotating the associated SSH key, when the key is still valid.

CLM
Automate certificate lifecycle management including issuance, discovery, renewal, and deployment, across public and private trust CAs. Assess, prioritize, and plan your migration to quantum-safe encryption with the Quantum Trust Hub add-on module.
PKI
Provision, govern and scale private trust certificates with a Post Quantum ready cloud based Enterprise PKI-as-a-Service.
Code Signing
Secure software, firmware, and containers with a comprehensive enterprise code signing solution.
SSH
Control SSH access and key rotation at scale with an SSH key lifecycle management solution.
- SSH Admin Guide
- SSH User Guide
  - Accessing SSH Features
  - Discovering Keys
  - Managing Devices/Hosts
  - Configuring Certificate Authority
  - Configuring Provision Settings
  - Configuring a Windows Gateway
  - Setting ACF and ACL Permissions
  - Adding Infra Access Groups
  - Managing Host Key and User Key Inventories
    - Key Inventory
    - Independent Certificate Renewal
      Administrators can renew an expiring SSH certificate from Certificate Inventory without rotating the associated SSH key, when the key is still valid.
    - Delete Trigger and Auto-select UX
      When a key with associated certificates is selected for deletion, AppViewX automatically selects all linked certificates for deletion by default. The delete workflow in Key Inventory now applies dependent-object handling for keys and certificates. This behavior ensures that certificate cleanup is included by default when deleting a key that has certificate associations.
    - Delete Certificate from Certificate Inventory
      Authorized users can delete certificates from Certificate Inventory for both User Cert and Host Cert views.
  - Managing Tags
  - Dashboard
  - Creating Key Policy and Group
  - Creating Host Policy and Group
- SSH API Guide
- Glossary
KUBE
Unify DevOps and Security teams by managing certificates with a Kubernetes-native certificate lifecycle management solution.
DDI
Manage domain registration, renewal, decommissioning, and other security controls with an end-to-end domain lifecycle management solution.
ADC
Automate and orchestrate application delivery infrastructure at scale with an ADC lifecycle automation platform.
Platform
Manage policy and automation across all of the products and modules in the AVX ONE platform.
AVX Setup
Get detailed instructions for setting up AVX ONE in on-premises or SaaS deployments.
Artifacts
Review new features, fixes, and security advisories with official AppViewX release documentation.

Independent Certificate Renewal

Administrators can renew an expiring SSH certificate from Certificate Inventory without rotating the associated SSH key, when the key is still valid.

Independent certificate renewal supports certificate lifecycle continuity without forcing key rotation. This behavior applies when the current SSH key remains valid and only the certificate requires renewal.

Renewal Behavior

Certificate renewal is initiated from Certificate Inventory.
The existing SSH key is retained and is not regenerated or replaced.
A new certificate is issued and mapped to the existing key, provided policy and CA validations succeed.
Inventory metadata is updated to reflect the renewed certificate validity period and status.

When to Use Independent Renewal

Use independent renewal when the certificate is approaching expiry but the associated key remains compliant and does not require rotation.

Note: If key rotation is mandated by policy, use the rotation workflow instead of independent certificate renewal.

Triggering Certificate Renewal

Go to Menu > SSH > Inventory > Certificate Inventory.
Select one or more certificates that are near expiry and linked to valid keys.
From Actions, select Renew Certificate.
Confirm the request to start renewal.
Monitor request status in Automation > Service Request > All.

Expected Outcomes

The certificate is renewed without changing the key fingerprint.
No key deployment changes are applied when renewal succeeds.
Audit and workflow records capture renewal execution and result.

CAUTION: Renewal can fail if Certificate Authority connectivity, policy validation, or endpoint prerequisites are not met.

AppViewX