The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Activating named certificates using the CLI

Prev Next

Use the commands in this section to activate the web-cert certificate on the Web server, and to activate the mta-cert certificate on the MTA.

Note

If you type web server certificate name ? at the command line, a list of all certificates in the certificates database will be displayed. However, only the "web-cert" or "system-self-signed" certificate can be activated. Likewise on the Email Security — Server appliance, if you type email-analysis mta certificate name ? , a list of all certificates in the certificates database will be displayed, but only the "mta-cert" or "system-self-signed" certificate can be activated.

To activate the web-cert certificate on the Web server:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Activate the certificate:

    hostname (config) # web server certificate name web-cert
  3. Verify your changes:

    hostname (config) # show web
  4. Save your changes.

    hostname (config) # write memory

Note

To reactivate the system-self-signed certificate, use the no web server certificate name or web server certificate name system-self-signed command.

To activate the mta-cert certificate on the MTA:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Activate the certificate:

    hostname (config) # email-analysis mta certificate name mta-cert
  3. Verify your changes:

    hostname (config) # show email-analysis
  4. Save your changes.

    hostname (config) # write memory

Note

To reactivate the system-self-signed certificate, use the no email-analysis mta certificate name or email-analysis mta certificate name system-self-signed command.

Example

The following example activates web-cert on the Web server, which is currently using the system self-signed certificate.

hostname (config) # show web

Web User Interface server:
   Web interface enabled:  yes
   ...  
   HTTPS certificate name:         system-self-signed
   ...
hostname (config) # web server certificate name web-cert
hostname (config) # show web

Web User Interface server:
   Web interface enabled:  yes
   ....
   HTTPS certificate name:         web-cert
   ...