--- title: "Automatic certificate renewal" slug: "certificatemanager-renewcertificate" updated: 2026-10-08T06:57:22Z published: 2026-10-08T06:57:22Z canonical: "guide.ncloud-docs.com/certificatemanager-renewcertificate" --- > ## Documentation Index > Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # Automatic certificate renewal Available in Classic and VPC Certificate Manager automatically renews the certificates it issues before they expire. Upon completion of renewal, the renewed certificate is automatically applied to the integrated service instances in use. For certificates that meet the automatic renewal conditions, renewal attempts are made daily from 45 days (renewal start date) to 30 days (renewal end date) before the authentication end date. ## Automatic renewal targets Automatic renewal is provided only for certificates issued using the DNS validation method. - As of October 17, 2024: Available only for Cloud Basic certificates. - As of October 17, 2024: Available only for certificates used exclusively with VPC Load Balancer. ## Automatic renewal quickstart Automatic renewal proceeds as follows. ### 1. Check renewal requirements Check if the certificate to renew meets the automatic renewal conditions. - In the NAVER Cloud Platform console, navigate to **Menu** > **All Services** > **Security** > **Certificate Manager** > **Cloud Certificate** > **Certificate List** and select the certificate to renew. - Check if the **Renewal eligibility** is shown as **Qualified** in the certificate renewal information. If the certificate is not qualified for renewal, see [Renewal eligibility](/docs/en/certificatemanager-renewcertificate#%EA%B0%B1%EC%8B%A0%EC%9E%90%EA%B2%A9) in this guide for the reasons. - Check if it is set as a renewal target from the certificate renewal information. The **Renewal target status** must be "Y." If it's "N," click **Set renewal target** to set it as a renewal target. - Certificates that are qualified for renewal and set as renewal targets display **Renewal start date** and **Renewal end date**. ### 2. Configure DNS validation for domains - Check that the CNAME DNS record name and record value required for DNS validation are set for all domains included in the certificate. For more information on how to set them, see [DNS validation](/docs/en/certificatemanager-domainvalid-dns). ### 3. Renewal process For certificates that meet the automatic renewal conditions, renewal attempts are made daily from 45 days (renewal start date) to 30 days (renewal end date) before the authentication end date. - The renewal process runs for about 1 hour starting at 1:00 AM (UTC+09:00) each day. The process stops when renewal is completed or the end date is reached. - Once the renewal process ends, the renewal results can be viewed from the Certificate Manager console. Results are also sent to the notification recipients configured in Notification Setting. - Upon successful renewal, the renewal status shows as **Succeeded** and the **Renewal completion date** is displayed. Under **Instance renewal status** > **Shortcut**, **Certificate renewal status (Y/N)** shows **Y**. ## Set renewal targets You can set whether an item is a renewal target. Navigate to **Cloud Certificate** > **Certificate List**, select a certificate, and click **Certificate renewal information** > **Set renewal target**. - Enabled, renewal target status **Y**: If the certificate is used by a VPC Load Balancer instance, automatic renewal runs from 45 days to 30 days before the certificate expires. - Disabled, renewal target status **N**: The certificate is excluded from renewal. Even if renewal eligibility is met and the certificate is within 45 days of expiration, the renewal process will not be attempted. Note When issuing a certificate with the DNS validation method, you can set up the automatic renewal target in advance in step 3. Review and request. ## Renewal eligibility To view renewal eligibility, navigate to **Cloud Certificate** > **Certificate List**, select a certificate, and open **Certificate renewal information**. | Type | Description | Condition | | --- | --- | --- | | Qualified | Automatic renewal is attempted from 45 days to 30 days before expiration for certificates that are qualified and set as renewal targets. | Certificates used exclusively with VPC Load Balancer that have more than 30 days of validity remaining | | Not qualified | Certificates that are not qualified for renewal cannot be automatically renewed. | Certificates that are not in use, are used with services other than VPC Load Balancer, or have 30 days or less of validity remaining | ## Renewal status To view the renewal status, navigate to **Cloud Certificate** > **Certificate List**, select a certificate, and open **Certificate renewal information**. | Renewal status | Description | | --- | --- | | Renewing | The renewal requirements are met, and renewal is in progress. | | DNS validation pending | DNS validation is in progress for at least 1 domain included in the certificate. When the renewal process begins the next day, it will retry starting with DNS validation. If DNS validation continues to fail until the renewal end date, the renewal fails. | | Renewal pending | The status is Renewal pending if no instance uses the certificate when the renewal period begins 45 days before expiration. If the certificate remains unused until 30 days before expiration, the renewal fails. | | Succeeded | The certificate has been renewed and automatically applied to the integrated instances in use. | | Failed | Renewal has failed. No further renewal attempts are made. If there are instances in use and certificate replacement is needed, you must obtain and apply a new certificate. See the following 3 reasons for renewal failure: - The renewal end date has passed. - No instances are using the certificate. - Certificate data validation failed. |