Renewing a Certificate Manually
Table of Contents
Expand all | Collapse all
-
- Activate Next-Generation Trust Security
-
-
- Configure Akamai Connection
- Configure AWS Connection
- Configure Azure Key Vault Connection
-
- Workload Identity Federation Authentication
- Workload Identity Federation - Azure Identity Provider Authentication
- Next-Gen Trust Security Generated Key Authentication
- User Permissions
- Workload Identity Federation Authentication
- Next-Gen Trust Security Generated Key Authentication
- User Permissions
- Supported OIDC Claims
-
-
-
- Working with the Built-in CA
- Add AWS Public CA
- Add AWS Private CA
- Add DigiCert One Certificate Authority
- Add Entrust
- Add GlobalSign Atlas
- Add GlobalSign MSSL
- Add GoDaddy
- Add Google Cloud Private CA
- Add a HID PKIaaS CA
- Add Certificate Manager - Self-Hosted
- Set Up an OpenSSL Certificate Authority Connector
- Create a Sectigo Certificate Manager Certificate Authority
- Add Zero Touch PKI
- Set Up Certificate Expiration Notifications
- Using a Custom DNS Provider
-
-
-
-
- Create an F5 BIG-IP LTM Machine
- Create a Microsoft Azure Private Key Vault Machine
- Create a Microsoft Azure Application Registration Machine
- Create a Microsoft IIS Machine
- Create a Microsoft Windows (PowerShell) Machine
- Create a Microsoft SQL Server Machine
- Create a Common KeyStore Machine
- Create a Citrix ADC Machine
- Create an Imperva WAF Machine
- Create a VMware NSX Advanced Load Balancer (AVI) Machine
- Create an A10 Thunder ADC Machine
- Create a Cloudflare Machine
- Create Kemp Virtual LoadMaster Machine
- Create a Palo Alto Panorama Machine
- Create a Radware Alteon Machine
-
- Provision to an F5 BIG-IP LTM
- Provision to a Microsoft Azure Private Key Vault
- Provision to Microsoft IIS
- Provision to Microsoft Windows (PowerShell)
- Provision to Microsoft SQL Server
- Provision to a Common KeyStore
- Provision to a Citrix ADC
- Provision to an Imperva WAF
- Provision to VMware NSX Advanced Load Balancer (AVI)
- Provision to an A10 Thunder ADC
- Provision to Cloudflare
- Provision to a Kemp Virtual LoadMaster
- Provision to Palo Alto Panorama
- Provision Certificates to Radware Alteon
-
-
- 47-Day Validity Readiness TLS Certificates dashboard
- About the Certificate Inventory
- Managing Certificate Lifecycle Settings
- Reissuing Certificates in Next-Gen Trust Security
- Downloading Certificates, Certificate Chains, and Keystores
- Retiring, Recovering, and Deleting Certificates
- Finding Certificates in the Certificate Inventory
- Importing Certificates from a CA Using EJBCA
- Domain-Based Validation for External Emails
-
- Create a Workload Identity Management or Discovery Agent Built-in Account
- Create an OCI Registry Built-in Account
- Create a Certificate Manager - Self-Hosted Built-in Account
- Create a Scanafi Built-in Account
- Toggling a Built-in Account on or Off
- Editing Built-in Accounts
- Deleting Existing Built-in Accounts
- Renew Existing Built-in Accounts
- Troubleshooting
Renewing a Certificate Manually
Follow these steps to manually renew a certificate.
- Sign in to Next-Gen Trust Security.
- Click Inventory > Certificates.
- Find the certificate you want to renew using filters, and then select the checkbox next to it.
- In the local menu bar, click Renew.
After you click Renew, either the Renew Certificate dialog or the Certificate Request wizard opens.
What determines which renewal option is shown?Next-Gen Trust Security shows the Renew Certificate dialog when the certificate can be renewed without changing its existing properties and associations.
In other cases, the Certificate Request wizard opens so you can review or update certificate details before completing the renewal.
Are tags preserved when a certificate is renewed?Yes. Certificate metadata, including tags, is preserved when you renew a certificate.
If you see the Renew Certificate dialog
To renew the certificate using the same properties, select No, just renew it, and then click Continue.
Info (Validity period): This option renews the certificate using the validity period defined by the issuing template.
If you want to change certificate details, select Yes, I want to make changes, and then click Continue to open the Certificate Request wizard.
If you see the Certificate Request wizard
Certificate information from the existing certificate is pre-filled.
On the Certificate Request screen:
- Select an Issuing template.
- (Optional) Select or create tags.
- Click Continue.
- Complete the request details as needed.
- Click Finish.
Viewing Requests and Renewed Certificates
After submitting the renewal:
- Go to Inventory > Certificate requests to view the request status.
- When the request status is Issued, select the certificate to view its details.
If you renewed the certificate using No, just renew it, the previous certificate version is available on the Previous Versions tab.
If you renewed the certificate using the wizard, both the new and previous certificates appear in the inventory.
What's Next
You can download the certificate for installation or assign it to a machine for provisioning.
If the previous certificate is no longer needed, you can retire it.