Setting CRL duration

Published on Sep 10, 2026

1 minute(s) read

Article summary

When the certificate revocation list (CRL) exceeds this duration setting, the CRL expires.

To set the duration of Endpoint Security (HX) certificate revocation list (CRL):

Enable CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the CRL duration, in days:
```
hostname (config) # hx pki server crl-days <days>
                  
```
where <days> is the number of days that the Endpoint Security (HX) CRL remains active. Valid values range from 0 and 65535 days. The default is 30 days.
To set the duration back to the default, use the no form of this command:
```
hostname (config) # no hx pki server crl-days
                  
```

Save your changes:

hostname (config) # write memory

:

Was this article helpful?