The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Reviewing certificates and settings

  • Published on Sep 23, 2026
  • 2 minute(s) read
Prev Next
To review Endpoint Security (HX) certificates and settings:

  1. Enable CLI configuration mode.

    hostname > enablehostname # configure terminal

  2. Review the certificates and certificate settings:

    hostname (config) # show hx pki

    The following is sample output from this command:

    HX PKI Configuration:


Prefix: <prefix>
Agent CA days: 7300
Agent CA key bits: 2048
Agent cert days: 1825
Server CA days: 7300
Server cert key bits: 2048
Server cert days: 1825
Server CRL days: 30

Provisioning cert use enabled: yes

CA:     comms
        valid from: <timestamp> to <timestamp>
        subject: <subject>
        fingerprint: <fingerprint>

CA:     distro
        valid from: <timestamp> to <timestamp>
        subject: <subject>
        fingerprint: <fingerprint>

CA:     agent
        valid from: <timestamp> to <timestamp>
        subject: <subject>
        fingerprint: <fingerprint>

CRL:    comms
        issued: <timestamp> and expires on <timestamp>
        number: <comms_CRL_number>
        fingerprint: <fingerprint>

CRL:    distro
        issued: <timestamp> and expires on <timestamp>
        number: <distro_CRL_number>
        fingerprint: <fingerprint>

host:   <HX_appliance_hostname>
        role: ca
        last ping: <timestamp>
: