Quick Start
This guide walks you through setting up TigerTrust and discovering your first certificates.
Step 1: Create API Key
- Log into your TigerTrust dashboard
- Navigate to Settings → API Keys
- Click Create API Key
- Select type: Agent
- Copy the generated key (starts with
ak_)
Step 2: Install the Agent
# Linux/macOS
curl -LO https://releases.tigertrust.io/agent/latest/tigertrust-agent-linux-amd64
chmod +x tigertrust-agent-linux-amd64
sudo mv tigertrust-agent-linux-amd64 /usr/local/bin/tigertrust-agent
Step 3: Configure the Agent
Create /etc/tigertrust/agent.yaml:
collector:
base_url: "https://collector.tigertrust.io"
api_key: "ak_your_api_key_here"
discovery:
local:
enabled: true
scan_paths:
- /etc/ssl
- /etc/nginx/ssl
- /etc/apache2/ssl
Step 4: Run the Agent
tigertrust-agent -config=/etc/tigertrust/agent.yaml
The agent will:
- Register with TigerTrust
- Scan configured paths for certificates
- Submit discovered certificates to the dashboard
Step 5: View Discovered Certificates
- Open the TigerTrust dashboard
- Navigate to Certificates → Discovered
- Review the certificates found by the agent
Step 6: Import and Manage
For each certificate you want to manage:
- Click Import on the discovered certificate
- Configure renewal settings:
- Renewal method (ACME, Manual CSR, CA API)
- Configure deployment targets
- Enable auto-renewal
Step 7: Set Up Alerts
- Navigate to Alerts → Rules
- Create expiration alert rule:
- Channels: Email, Slack, Teams
What's Next?
- Agent Configuration - Advanced agent settings
- Certificate Discovery - Discovery scan types
- Auto-Renewal - Configure automatic renewals
- API Reference - Integrate with your systems