The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Setting agent certificate authority duration

  • Published on Sep 10, 2026
  • 1 minute(s) read
Prev Next
To set the duration of the Trellix Endpoint Security (HX) agent certificate authority (CA):

  1. Enable CLI configuration mode.

    hostname > enable
hostname # configure terminal
                  

  2. Specify the CA duration, in days:

    hostname (config) # hx pki agent ca-days <days>
                  

    where <days> is the number of days that the agent CA remains active. Valid values range from 0 and 65535 days. The default is 7300 days.

    To set the duration back to the default, use the no form of this command:

    hostname (config) # no hx pki agent ca-days
                  

  3. Save your changes:

    hostname (config) # write memory
                  
: