General

With two checks, Attic checks whether applications are registered in the Microsoft Tenant whose secrets or certificates will soon expire.

Rationale

Application Registrations are often - if not always - used to automate processes. Authentication is arranged in them with secrets and certificates, both of which have an expiration date. At the end of the expiration date, action must be taken to renew. If this is not done, you may be surprised by processes that suddenly stop running and that can have serious consequences. That is why Attic will warn you when secrets or certificates are about to expire, so that you can prevent downtime.

Manual Instruction

Follow these steps to renew secrets or certificates:

1. Open the Entra lD management portal https://entra.microsoft.com
2. Go to Applications and App registrations
3. Click on All applications and find the application that the alarm is about
4. Click on the name of the application
5. Go to Certificates & secrets
6. Create a new Secret or upload a new certificate.
7. Incorporate new authentication methods into other scripts or systems that communicate with App registration

More information

1. https://learn.microsoft.com/en-us/entra/identity-platform/security-best-practices-for-app-registration#certificates-and-secrets