Certificate management

Certman: certificates handled on every device

Every printer and MFD needs its own valid certificate to encrypt print and management traffic. Certman issues, renews and revokes them automatically, across every brand, so an expired certificate never takes a device out of service.

Everymajor brand

Autoissue, renew, revoke

Request a quote

Why certificates are a headache

Encrypted communication (HTTPS and IPPS) is now expected for compliance and data protection, and every device needs its own unique, valid certificate. Managed by hand, that means issuing each one, tracking every expiry date, and the ever-present risk of an expired certificate silently taking a device out of service.

Devices also need an up-to-date trusted root store, so they trust the services they connect to.

What Certman does

Issues certificates

A secure, cloud-based Certificate Authority issues each device its own unique certificate.

Renews them automatically

Certificates are renewed before they expire, with no visit to the device and no calendar reminders.

Revokes them when needed

Certificates for retired or compromised devices are revoked centrally.

Keeps the root store current

Each device's trusted root certificate store is kept up to date, so devices keep trusting the services they rely on.

Fits every device

Certificates are delivered by the standard SCEP protocol or the manufacturer's own toolkit, whichever the device supports.

One platform, every brand

Canon, HP, Ricoh, Xerox, Lexmark and other major brands, managed from one place.

Why now

Certificate lifetimes are getting shorter. Under the CA/Browser Forum's ballot SC-081v3, the maximum lifetime of publicly trusted TLS certificates is falling in stages:

Certificates issued from	Maximum lifetime
15 March 2029	47 days
15 March 2027	100 days
15 March 2026	200 days
Before 15 March 2026	398 days

Renewing certificates by hand, device by device, only gets harder from here. Certman takes the job off your team.

Source: SSL.com, preparing for 47-day certificates (CA/Browser Forum ballot SC-081v3). The schedule applies to publicly trusted certificates.

For every Cirros customer

Certman is available with Cirros SL, Cirros Public Print, Cirros PP and GovPrint. It is charged per active device, monthly or annually in advance.

Ask us for a price for your fleet.

Security and compliance

Cirros certifications, UK data residency, encryption, monitoring and resilience.

Supported devices

HP, Canon, Ricoh, Xerox and Lexmark are fully supported by Cirros, with card and passcode sign-in.

Windows Protected Print: is your printing ready?

Microsoft is phasing out third-party printer drivers on Windows 11. Cirros supports Windows Protected Print as standard, so you can switch it on and keep printing.