The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Setting Endpoint Security (HX) certificate length

Prev Next
To set the length of Endpoint Security (HX) certificates:
  1. Enable CLI configuration mode.

    hostname > enable hostname # configure terminal
  2. Specify the certificate length, in bits:

    hostname (config) # hx pki server cert-bits <bits>

    where <bits> is the number of bits for the Endpoint Security (HX) certificates. Valid values range from 1024 and 4096 bits. The default is 4096 bits.

    To set the length back to the default, use the no form of this command:

    hostname (config) # no hx pki server cert-bits
  3. Save your changes:

    hostname (config) # write memory