Regenerating the system self-signed certificate using the CLI

Use the commands in this section to regenerate the system self-signed certificate.

Important

If the Web server is configured to use the system self-signed certificate, the web server certificate regenerate command will also regenerate and replace the system self-signed certificate.

To regenerate the system self-signed certificate:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Regenerate the certificate:

To extend the expiration date by 365 days:

hostname (config) # crypto certificate system-self-signed regenerate

To extend the expiration date by a different number of days:

hostname (config) # crypto certificate system-self-signed days-valid <days>

Verify your change:

hostname (config) # show crypto certificate name system-self-signed

Save your changes.
```
hostname (config) # write memory
```

Example

The following example regenerates the system self-signed certificate and extends the expiration date by two years.

hostname (config) # crypto certificate system-self-signed regenerate days-valid 730
hostname (config) # show crypto certificate name system-self-signed
Certificate with name 'system-self-signed'
    Comment:                     system-generated self-signed certificate
    Private Key:                 present
    Serial Number:               0x71a676d9a1j5d8a316488f9d683kkc0
    SHA-1 Fingerprint:           7g04933d77491wgeg2h78d2a6f34s50cech324c78

    Validity:
        Starts:                  2015/04/25 20:32:50
        Expires:                 2017/04/22 20:32:50    
        ...