The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Setting Endpoint Security (HX) CRL duration

Published on Sep 23, 2026

1 minute(s) read

When the certificate revocation list (CRL) exceeds this duration setting, the CRL expires.

To set the duration of Endpoint Security (HX) certificate revocation list (CRL):

Enable CLI configuration mode.

hostname > enable hostname # configure terminal

Specify the CRL duration, in days:
```
hostname (config) # hx pki server crl-days <days>
```
where <days> is the number of days that the Endpoint Security (HX) CRL remains active. Valid values range from 0 and 65535 days. The default is 30 days.
To set the duration back to the default, use the no form of this command:
```
hostname (config) # no hx pki server crl-days
```
Save your changes:
```
hostname (config) # write memory
```

:

Was this article helpful?