The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Setting agent certificate duration

Published on Sep 23, 2026

1 minute(s) read

To set the duration of Trellix Endpoint Security (HX) xAgent certificates:

Enable CLI configuration mode.

hostname > enable hostname # configure terminal

Specify the certificate duration, in days:
```
hostname (config) # hx pki agent cert-days <days>
```
where <days> is the number of days that the agent certificate remains active. Valid values range from 0and 65535 days. The default is 1825 days (5 years).
To set the duration back to the default, use the no form of this command:
```
hostname (config) # no hx pki agent cert-days
```
Save your changes:
```
hostname (config) # write memory
```

:

Was this article helpful?