Delete Obsolete Cloud Identity Agent Certificates

Table of Contents

Remove Cloud Identity Agent Certificates

Delete Obsolete Cloud Identity Agent Certificates

Where Can I Use This?	What Do I Need?
NGFW Prisma Access	The Cloud Identity Engine service is free; however, the enforcement points utilizing directory data may require specific licenses. Click here for more information.

You must delete the previous certificate for the agent before installing the new certificate. If you do not delete the previous certificate, the Cloud Identity Engine may reference the previous certificate instead of the new certificate.

On the agent host, open Microsoft Management Control (MMC) by selecting StartRun, then entering MMC.
Select FileAdd/Remove Snap-In.
Select CertificatesAdd.
Select Computer AccountNext.
Select Local ComputerFinish.
Click OK, then navigate to Console RootCertificates (Local Computer)PersonalCertificates.
Select the previous certificate from the list.
Right-click the certificate, then Delete and click Yes to confirm the deletion.
Generate a new certificate to Authenticate the Agent and the Cloud Identity Engine and install it on the agent host.