The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Apply for CA-signed certificates

Prev Next

You can apply for CA-signed certificates based on the CSR generated. To apply for the certificate, perform the following steps:

  1. To apply for a CA-certificate, you must first export the CSR for the Manager and Sensor.

    To export CSR for the Manager, go to Manager → <Root Admin Domain> → Setup → Certificates.

    To export CSR for the Sensor, go to Devices → <Root Admin Domain> → Devices → <Device Name> → Setup → Trust Certificates.

  2. In the CA-Signed Certificate section, click Export CSR. The CSR is exported to the Downloads folder of the remote machine accessing the Manager.

    GUID-4FEECDE9-0552-4C57-B2E4-F0025F6EB7AD-low.png

    Note

    The Export CSR button becomes active only after you generate the CSR.

  3. Once the CSRs are exported, send both the Manager and Sensor generated CSRs to a Certified Authority of your choice.

  4. The CA processes the CSR and returns the CA-signed certificate.