Send feedback
Update a TLS certificate
You're viewing Apigee Edge documentation.Go to the
Apigee X documentation . info
If a TLS certificate expires, or if your system configuration changes such that the
certificate is no longer valid, then you need to update the certificate. The process of updating
a certificate depends on your deployment of Edge: cloud or on-premises.
Note: You cannot update an existing keystore to add a new certificate.
You must create a new keystore when updating a certificate.Note: If you configured the virtual host or the TargetEndpoint to
use a reference to the keystore or truststore, you can update the reference to point to a
different keystore or truststore to update the TLS cert. That means Cloud customers do not have
to contact Apigee Support and Private Cloud customers do not need to restart a Router or Message
Processor. However, Cloud customers must contact Apigee Support if they require an update to the
virtual host. See Configuring TLS access to an API
for the Private Cloud for more on using a reference in a virtual host or
TargetEndpoint.
Note: You can optionally choose to delete the existing keystore and then create a new
one with the same name. However, for the time from when the certificate expired until you
create the new keystore, you cannot service requests.If the keystore is used for two-way TLS between Edge and the backend service, and you are
using Edge for the Private Cloud, then after deleting and recreating the keystore with the same
name, you must restart the Edge Message Processors.
Determine when a cert is due to expire
Typically, you create a new keystore before the current certificate expires, and then
update your virtual hosts or target endpoints to use the new keystore so that you can continue to
service requests without interruption due to an expired certificate. You can then delete the old
keystore after ensuring that the new keystore is working correctly.
To check when a certificate is due to expire, go to:
(New Edge UI) Admin > Environments > TLS Keystores
(Classic Edge UI) APIs > Environment Configuration > TLS Keystores
Send feedback
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-04-30 UTC.
[{
"type": "thumb-down",
"id": "missingTheInformationINeed",
"label":"Missing the information I need"
},{
"type": "thumb-down",
"id": "tooComplicatedTooManySteps",
"label":"Too complicated / too many steps"
},{
"type": "thumb-down",
"id": "outOfDate",
"label":"Out of date"
},{
"type": "thumb-down",
"id": "samplesCodeIssue",
"label":"Samples / code issue"
},{
"type": "thumb-down",
"id": "otherDown",
"label":"Other"
}]
[{
"type": "thumb-up",
"id": "easyToUnderstand",
"label":"Easy to understand"
},{
"type": "thumb-up",
"id": "solvedMyProblem",
"label":"Solved my problem"
},{
"type": "thumb-up",
"id": "otherUp",
"label":"Other"
}]
Need to tell us more?
{"lastModified": "Last updated 2024-04-30 UTC."}
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-04-30 UTC."],[],[]]
