How to update a CA certificate
Overview
This procedure explains how to renew or replace a CA certificate in Redtrust. When you upload a new certificate, agents receive it automatically on their next login.
Steps
- In the CA certificates section of the admin console, click Upload.
- Select the new certificate file (der, cer, crt or pem).
- Confirm the new certificate appears in the list.
Agents receive the new certificate automatically on their next login.
If you need agents to receive the certificate right away, users must sign out of the agent and sign back in.
Delete the old certificate (optional)
Once agents have had the opportunity to log in and receive the new certificate, you can delete the old one. Hover over the old certificate's row and click Delete Certificate.
Deleting a certificate doesn't remove it from agents that already have it installed. The certificate stops being distributed from that point on, but is not removed from machines where it was already installed.
Summary
To update a CA certificate, upload the new certificate. Agents receive it on their next login with no additional intervention required. Deleting the old certificate is optional — it stops the old certificate from being distributed to agents that don't have it yet, but does not remove it from agents that already have it installed.
Next steps
- See System certificates for a full explanation of CA certificate behaviour.