Remove Cloud Identity Agent Certificates

Table of Contents

If the Cloud Identity agent’s certificate is compromised, remove the compromised certificate and generate a new certificate.

Where Can I Use This?	What Do I Need?
NGFW Prisma Access	The Cloud Identity Engine service is free; however, the enforcement points utilizing directory data may require specific licenses. Click here for more information.

If a Cloud Identity agent’s certificate is compromised, remove the certificate.

Log in to the hub and select Cloud Identity Engine.
Select the tenant associated with the agent with the compromised certificate.
From the Cloud Identity Engine app, select Agents & Certificates.
Remove the certificate.
Delete Obsolete Cloud Identity Agent Certificates to remove the previous certificate.
Generate a new certificate to Authenticate the Agent and the Cloud Identity Engine and install it on the agent host.