The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Setting agent certificate duration

  • Published on Sep 10, 2026
  • 1 minute(s) read
Prev Next
To set the duration of Trellix Endpoint Security (HX) Agent certificates:

  1. Enable CLI configuration mode.

    hostname > enable
hostname # configure terminal
                  

  2. Specify the certificate duration, in days:

    hostname (config) # hx pki agent cert-days <days>
                  

    where <days> is the number of days that the agent certificate remains active. Valid values range from 0 and 65535 days. The default is 1825 days (5 years).

    To set the duration back to the default, use the no form of this command:

    hostname (config) # no hx pki agent cert-days
                  

  3. Save your changes:

    hostname (config) # write memory
                  
: