The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Setting agent certificate authority duration

Published on Sep 23, 2026

1 minute(s) read

To set the duration of the Trellix Endpoint Security (HX) xAgent certificate authority (CA):

Enable CLI configuration mode.

hostname > enable hostname # configure terminal

Specify the CA duration, in days:
```
hostname (config) # hx pki agent ca-days <days>
```
where <days> is the number of days that the agent CA remains active. Valid values range from 0 and 65535 days. The default is 7300 days.
To set the duration back to the default, use the no form of this command:
```
hostname (config) # no hx pki agent ca-days
```
Save your changes:
```
hostname (config) # write memory
```

:

Was this article helpful?