# Certificate Management > Canonical Certificate Management provides tools and workflows for managing TLS certificates in enterprise environments. 2026 CC-BY-SA, Canonical Ltd. ## Pages - [Certificate Management documentation](index.md): Canonical Certificate Management provides charms for managing TLS certificates in Juju-deployed applications with automated certificate lifecycle management. - [Tutorials](developer/tutorials.md): * [Getting Started with the TLS Certificates Library (v4)](tutorials/getting-started-tls-certificate... - [Getting Started with the TLS Certificates Library (v4)](developer/tutorials/getting-started-tls-certificates-library-v4.md): In this tutorial, we will take a working Nginx charm and add the TLS Certificates integration using ... - [How-to guides](developer/how-to-guides.md): * [Testing your requirer charm](how-to-guides/testing-requirer-charm.md) - [Testing your requirer charm](developer/how-to-guides/testing-requirer-charm.md): This guide covers the integration test scenarios you should write to validate - [Reference](developer/reference.md): * [The `tls-certificates` library](tls-certificates-interface.md) - [The `tls-certificates` library](developer/tls-certificates-interface.md): The `tls-certificates` library helps charm authors automate certificate requests, renewal, and revoc... - [TLS Certificates Interface Library Versions](developer/reference/library-versions.md): | Library Version ... - [Important Update: New Labels for Juju Secrets](developer/reference/juju-secrets-labels.md): A change in private key labeling will allow a requirer with multiple instances of the tls-certificat... - [Recommended Juju Configuration Options for TLS Requirers](developer/reference/recommended-juju-config.md): For charms that expose public HTTPS endpoints, certificate attributes should be decided at deploymen... - [Explanation](developer/explanation.md): * [Do I need to implement the TLS library?](explanation/do-i-need-tls.md) - [Do I need to implement the TLS library?](developer/explanation/do-i-need-tls.md): Most charm applications need TLS certificate management for secure communication. The `tls-certifica... - [Common Name and SANs Attributes](developer/explanation/common-name-and-sans-attributes.md): While there isn’t a single definitive answer for what values the SAN fields should contain, the foll... - [Certificate Renewal with the TLS Certificates Library v4](developer/explanation/certificate-renewal.md): This feature is only available in v4. - [Differences between TLS Certificates Library v3 and v4](developer/explanation/differences-v3-v4.md): - Requires users to perform multiple TLS-related operations independently: - [Security Explanation in TLS Certificates Interface](developer/explanation/security-explanation.md): The TLS Certificates Interface and library are developed with Security as one of their core values. ... - [Tutorials](operator/tutorials.md): Page content - [Reference](operator/reference.md): * [Deployment blueprints](deployment-blueprints.md) - [Deployment blueprints](operator/deployment-blueprints.md): The following deployment blueprints provide reference architectures for using TLS providers in real-... - [Multi-model TLS reference architecture](operator/deployment-blueprints/multi-model-tls.md): This reference architecture shows how to secure a multi-model Juju deployment with TLS. It combines ... - [Explanation](operator/explanation.md): * [Understanding TLS in Juju deployments](understanding-tls.md) - [Understanding TLS in Juju deployments](operator/understanding-tls.md): X.509 certificates are essential to the security of many Internet protocols, including TLS/SSL. If y... - [Securing internal communication](operator/explanation/securing-internal-communication.md): This page explains how TLS secures communication between units of the same application or between ap... - [Securing API communication](operator/explanation/securing-api-communication.md): This page explains how TLS secures client-facing traffic, where external clients or other services c... - [CA trust best practices](operator/explanation/ca-trust-best-practices.md): In the Juju ecosystem, multiple TLS providers can be used to issue certificates for applications and... - [How-to guides](operator/how-to-guides.md): Page content