The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Defining default certificate attributes using the CLI

Prev Next

Use the commands in this section to define default certificate attributes.

To define attributes:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Define the default value:

    hostname (config) # crypto certificate generation default <attribute> <value>
  3. Repeat the previous step for each attribute you want to change.

  4. Save your changes.

    hostname (config) # write memory
  5. (Optional) Regenerate the certificates to apply the updated attributes:

    hostname (config) # crypto certificate name <certificateName> regenerate

Example

This example changes the organizational unit to Information Technology. It then regenerates the web-cert certificate to apply the updated attribute value, and displays the certificate to verify the change.

hostname (config) # crypto certificate generation default org-unit "Information Technology" 
 
hostname (config) # crypto certificate name web-cert regenerate
Successfully regenerated certificate with name 'web cert'
 
hostname (config) # show crypto certificate name web-cert