Managing certificates issued by certificate enrollment configurations

Ivanti EPMM runs a process each day at 3:45 am that manages all certificates issued using certificate enrollment configurations.

Certificates have a limited lifetime that is defined when certificates are issued. When the certificate lifetime is within the expiry window (60 days, by default), Ivanti EPMM does not automatically renew the certificates. Only a forced manual renewal/creation is possible.

Re-issued certificates are sent to the managed device configuration and the expiring certificates become inactive. The inactive certificates are purged from the system once the certificates are expired or confirmed to be revoked.