Hi,

We run two on-premises ServiceDesk Plus instances (build 15.2 / 15280, Windows Server) and we want to automate the periodic renewal/replacement of the web-server SSL certificate (a Sectigo wildcard *.dmg.it) from a central script, without using the web UI.

Could you confirm the supported way to do this unattended and the details below:

1. Import method — Is there a supported command-line / scriptable method (or REST API) to import a PKCS#12 (.pfx) certificate (server certificate, full chain and private key) without the Admin > General Settings > Import SSL page? If keytool/keystore is the supported path, please provide the exact procedure: keystore file path (e.g. sdp.keystore), the alias to use, and the configuration files that must be updated so the server serves the new certificate.
2. Service restart — Is a service restart required for the new certificate to take effect? (We can restart the Windows service ourselves — we only need confirmation and, if there are multiple services, the correct order.)
3. Verification — After the restart, how can we programmatically verify that the newly imported certificate is the one actually being served?
4. Backup / rollback — Is there any automatic rollback, or do you recommend backing up the current keystore/configuration before replacing? Please list the exact files to back up.
5. Unattended authentication — For automation, how should the operation be authenticated (service account, API key, or none required for the keystore method)?

Thanks in advance for the detailed steps.

Best regards,