Documentation
aethercert documentation: the dashboard, the host-side agent, the free Toolkit certificate utility, and manual certificate replacement guides for 30 products.
aethercert issues TLS certificates, installs them where they are needed, and renews them before they expire. The documentation is split by the piece of software you are working with.
Dashboard
The control plane. Certificates, domains, certificate authorities, agents, deploy targets, organizations, monitoring, plans and limits.
Agent
The software on your servers. Installing it, configuring it, updating it, the CA connector, and the command-line reference.
Toolkit
The free certificate utility for Windows. Create CSRs, manage the Windows certificate store, convert PFX files, sign code and scan your network for TLS certificates.
Manual certificate replacement
How to replace a certificate by hand on IIS, Exchange, AD FS, NGINX, F5, FortiGate, vCenter and 24 other products.
Where to start
| You are | Start at |
|---|---|
| Evaluating aethercert | How it works, then Security and data handling |
| Setting it up for the first time | Quickstart |
| Rolling it out to a fleet | Agent groups and Certificate policies |
| Looking a setting up | Dashboard reference |
| Debugging a failed job | Troubleshooting |
| Creating a CSR or scanning a network by hand | Toolkit |
New to the terminology? The glossary defines every term these pages use, including the ACME ones.
Conventions
- Dashboard paths are written as they appear in the sidebar. Manage > Domains means the Domains entry under the Manage section.
- Commands assume an elevated shell:
sudoon Linux, an Administrator PowerShell prompt on Windows. - Placeholders look like
<token>. Replace the whole thing, angle brackets included. - Plan requirements are stated next to the feature they apply to. The full matrix is in Plans and limits.
The version selector at the top of the sidebar switches documentation versions. Version 2026 documents the current release.