Setting agent certificate length

Published on Sep 10, 2026

1 minute(s) read

Article summary

To set the length of Trellix Endpoint Security (HX) agent certificates:

Enable CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the certificate length, in bits:
```
hostname (config) # hx pki agent cert-bits <bits>
                  
```
where <bits> is the number of bits for the agent certificates. Valid values range from 1024 and 4096 bits. The default is 2048 bits.
To set the length back to the default, use the no form of this command:
```
hostname (config) # no hx pki agent cert-bits
                  
```

Save your changes:

hostname (config) # write memory

:

Was this article helpful?