Press CTRL+K to open search

hx pki regenerate crl

  • Published on Aug 4, 2026
  • 1 minute(s) read
Prev Next

Resets the Endpoint Security (HX) communications server certificate revocation list (CRL).

This command is used to resolve a date or configuration discrepancy that causes the CRL to become invalid.

Note

An invalid CRL should correct itself automatically within 30 minutes of the date or time discrepancy. This command forces the correction to occur immediately.

Caution

Using this command detaches any HXD (DMZ) appliance from the HX appliance. You need to reattach them after running this command.

Syntax

hx pki regenerate crl

Parameters

None

Example

The following example resets the agent subordinate CRL:

hostname (config) # hx pki regenerate crl

User role

Admin

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Endpoint Security (HX): Release 3.2.1

Related articles
  • Regenerating the CRL
    Endpoint Security (HX) > Endpoint Security (HX) On-Premises Server 10.x Deployment Guide > Appendices > Managing Endpoint Security (HX) PKI certificates
  • Regenerating the CRL
    Endpoint Security (HX) > Endpoint Security (HX) Virtual Server Deployment Guide Release 5.3.0 > Appendices > Managing Endpoint Security (HX) PKI certificates
  • Regenerating the CRL
    Endpoint Security (HX) > Endpoint Security (HX) Cloud Server 10.x Deployment Guide > Appendices > Managing Endpoint Security (HX) PKI certificates