Use this file to discover all available pages before exploring further.
The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.
Press CTRL+K to open search
Configuring local CRL file updates using the configuration menu
Use the menu options in this section to configure local Certificate Revocation List (CRL) file updates. You can configure how often the NDR appliance downloads a new local or remote CRL file and specify the remote location of a CRL file.
To configure local CRL file updates:
Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter configuration CAC menu.
npadmin@ia(config)# authentication
In the CAC/PIV configuration menu, select 2 to configure the current authentication method.
In the PKI Configuration menu, select 3 to enter the CRL Configuration menu. The following appears:
Select 3 to upload a CRL file to the appliance. Upload the CRL file to /home/npscp/transfer/.
In the CRL Configuration menu, select 1 to enter the URL of the direct path to the certificate file.
The URL is specified with remote server Administrator credentials ( and ), the remote server (), the path and filename in which to save the certificate bundle () in the following format: scp://<username>[:<password>]@<hostname>/<path/filename>
Note
If you do not include the password, the configuration menu prompts for the password and obfuscates the keyboard input as you type it.
In the CRL Configuration menu, select 2 to set the time interval in hours for how often the appliance downloads a new CRL file.