The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Importing certificates

Prev Next

You can import Endpoint Security (HX) public key infrastructure (PKI) certificates from a backup file. If there were any problems upgrading your appliance that required you to reimage it or to fully reinstall the Endpoint Security (HX) server software, import the Endpoint Security (HX) certificates you exported earlier so you do not have to reinstall all of your agents.

To import Endpoint Security (HX) PKI certificates:
  1. Enable CLI configuration mode.

    hostname > enablehostname # configure terminal
  2. Import the certificates from the file containing your exported certificates, identified by <fileURL>:

    hostname (config) # hx pki import file <fileURL> passphrase <passphrase>

    For example:

    hostname (config) # hx pki import file scp://user@host/path/to/file passphrase abc123

    Caution

    Importing certificates automatically detaches any DMZ server from the Endpoint Security (HX) server. You need to reattach them after the certificates are imported. See the Endpoint Security (HX) Server Deployment Guide.