The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Setting certificate authority duration

Prev Next
To set the duration of the Endpoint Security (HX) certificate authority (CA):
  1. Enable CLI configuration mode.

    hostname > enable
    hostname # configure terminal
                      
  2. Specify the CA duration, in days:

    hostname (config) # hx pki server ca-days <days>
                      

    where <days> is the number of days that the Endpoint Security (HX) CA remains active. Valid values range from 0 and 65535 days. The default is 7300 days.

    To set the duration back to the default, use the no form of this command:

    hostname (config) # no hx pki server ca-days
                      
  3. Save your changes:

    hostname (config) # write memor