Setting agent certificate authority duration
- Published on Sep 10, 2026
To set the duration of the Trellix Endpoint Security (HX) agent certificate authority (CA):
Enable CLI configuration mode.
hostname > enable
hostname # configure terminal
Specify the CA duration, in days:
hostname (config) # hx pki agent ca-days <days>
where <days> is the number of days that the agent CA remains active. Valid values range from 0 and 65535 days. The default is 7300 days.
To set the duration back to the default, use the no form of this command:
hostname (config) # no hx pki agent ca-days
Save your changes:
hostname (config) # write memory
Was this article helpful?
Related articles
Endpoint Security (HX) > Endpoint Security (HX) Virtual Server 10.x Deployment Guide > Appendices > Managing Endpoint Security (HX) PKI certificates
Endpoint Security (HX) > Endpoint Security (HX) On-Premises Server Deployment Guide Release 5.3.0 > Appendices > Managing Endpoint Security (HX) PKI certificates
Endpoint Security (HX) > Endpoint Security (HX) Virtual Server Deployment Guide Release 5.3.0 > Appendices > Managing Endpoint Security (HX) PKI certificates