This document provides troubleshooting steps for common issues that you might encounter with Certificate Manager (2nd gen).
Certificate not visible in the inventory
This issue occurs when you view your certificate inventory, but a certificate is missing.
To resolve this issue, do the following:
- If you recently enabled the Certificate Manager API or issued a certificate, certificates can take up to 24 hours to persist in the inventory. Certificate Manager attempts to persist certificates as quickly as possible.
- Verify that you're viewing the inventory in the same Google Cloud project where the Certificate Authority, Managed Workload Identity pool, or certificate-issuing resource resides. Certificate Manager displays only the relevant certificates for the scope of the Google Cloud project that you're viewing.
- Certificate Manager displays only certificates from networking resources like load balancers, certificates issued from Certificate Authority Service, and certificates issued from Managed Workload Identity. Certificates issued from other providers or integrations might not appear. To suggest new sources, click the Send feedbackbutton on this page.
Lifecycle management update operations fail
This issue occurs when you attempt to update resources, such as Managed Workload Identity pools or target proxies, using lifecycle management, and the operation fails.
To resolve this issue, do the following:
- Verify that you have the correct Identity and Access Management permissions to edit the configuration of the target resources.
- Because some lifecycle management operations can fail intermittently, wait a few minutes and attempt the update operation again.
Overview metrics don't match the inventory
This issue occurs when you view the certificate overview metrics and notice that they don't match the statistics in the certificate inventory.
To resolve this issue, check the certificate inventory for the most up-to-date view of your certificates. The analytics that evaluate the certificate inventory can lag behind the real-time status by up to 24 hours, which can cause the overview statistics to be temporarily out of date.
