Monitor for expiring TLS certificate

[paranoidDBA]

I'd like to use DBADash to monitor for expiring TLS certicates, wondering if anyone else has done this?

One idea I had was to use dbatools "Get-NetworkCertificate" cmdlet, to populate a table on our dba management servers with the details and expiry dates of each certificate in our estate. Then use the custom check dbadash feature to check this table where expiry date is <30 days (or whatever). I'd have to get the custom check to run only on the dba management server, if that is possible?

[DavidWiseman]

Yes you can just create the custom check just on the management server. See here for more info on custom checks.

Another alternative once you get the data into a table is to use a SQL Agent job. The job should be configured to fail when you have certificates that are close to expiry. DBA Dash will then highlight the agent job failure.

If you want to store the data in the DBA Dash database, create a table in the UserData schema to avoid any conflicts with table names. You could even create a custom report to list all the certificate expiry dates.