Setting agent certificate authority duration

Published on Sep 10, 2026

1 minute(s) read

Article summary

To set the duration of the Trellix Endpoint Security (HX) agent certificate authority (CA):

Enable CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the CA duration, in days:
```
hostname (config) # hx pki agent ca-days <days>
                  
```
where <days> is the number of days that the agent CA remains active. Valid values range from 0 and 65535 days. The default is 7300 days.
To set the duration back to the default, use the no form of this command:
```
hostname (config) # no hx pki agent ca-days
                  
```

Save your changes:

hostname (config) # write memory

:

Was this article helpful?