Applications with expired certificates
AI summary
Expired certificates prevent Entra ID application authentication and create credential clutter. Identify applications with expired certificates, check if each is still needed, upload a new certificate if needed, and remove the expired one.
What it detects
Shows Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more applications with expired certificates.
Why it matters
An application cannot authenticate with a certificate that has expired. If the app still relies on it, it has already stopped working. If it does not, the expired credential is clutter that hides which credentials are really in use. Check with the owner whether the app is still needed, upload a new certificate if it is, and remove the expired one.
The rule
Every Application registration that has any Registration Certificates where End date is more than 1 days ago
In Rencore Governance
Details
| Applies to | Application registration |
|---|---|
| Connector | Entra ID |
| Severity | High |
| Category | Operation |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Application registration objects:
Frequently asked questions
What does the applications with expired certificates policy detect?
The Applications with expired certificates policy shows Entra ID applications with expired certificates.
Which objects does the applications with expired certificates policy check?
The Applications with expired certificates policy checks Application registration objects from the Entra ID inventory and reports each one that matches its rule as a violation.
How severe is a violation of the applications with expired certificates policy?
Violations of the Applications with expired certificates policy have High severity. The policy is in the Operation category.
Which module includes the applications with expired certificates policy?
The Applications with expired certificates policy comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?