Renew or Regenerate CA Certificate

Procedure

To renew or regenerate the CA certificates, run the renewal script efa_renew_certs.sh.

Note

In TPVM, the renewal script is available in /apps/efa/ and /opt/efa/ on a server installation.

Run the following script to update the root CA:

sudo bash /opt/efa/efa_renew_certs.sh --type rootca

Run the following script to update the intermediate CA:
```
sudo bash /opt/efa/efa_renew_certs.sh --type intermediateca
```

Results

After the CA certificates are updated, the Syslog certificates for the registered devices are automatically updated. But, ensure to manually update the HTTPS certificates on the devices. For more information about updating the certificates, see Renew HTTPS Certificates for SLX.