Administration Overview
Organization-level administration: settings, licensing, clustering, and system health.
General settings reference
Every field on Settings → General: feature toggles, approval requirements, certificate defaults, runtime limits, DNS propagation behaviour, and UI preferences — with ranges and defaults.
Organizations & projects
The tenancy model (one organization, many projects), which resources are org-wide vs project-scoped, OV/EV organization profiles, and project lifecycle.
License
Online (API key + license key) and offline (signed file) activation, plan-based certificate limits, grandfathered renewals, and the 7-day grace period after expiry.
Project variables
Per-project values and secrets injected into SSH/WinRM ActionSet scripts via ${{ VAR_NAME }} placeholders. Secrets are envelope-encrypted and never returned by the API.
Cluster instances
Settings → Cluster: every live CertAutoPilot process with its mode, uptime, heartbeat, leader roles, and KEK state — plus how MongoDB-lock leader election behaves when a leader dies.
System status
Settings → System Status: per-component health (Main Scheduler, Domain Checker, Discovery Checker), the active leader, last sweep results with counters, and recent run history.
Scheduler status & sweeps
What the leader-elected scheduler actually does: the full sweep catalog (renewal, ARI, expiration, distribution, zombie recovery, DNS cleanup, domain WHOIS, discovery), intervals, and how renewal due-ness is decided.
KEK versions page
Reading Settings → KEK Versions: version table, per-instance key load state, fleet readiness, rotation progress and history. The page is read-only — rotations run from the CLI.