You can reissue the public key to replace the existing connection between Jamf Pro, the Jamf PKI Proxy, and Venafi TPP with a new connection.

1. Log in to Jamf Pro.

2. In the top-right corner of the page, click Settings .

3. Click Global Management.

4. Click PKI Certificates .

5. Click the Certificate Authorities tab.

6. Locate the Venafi CA in the list, and then click View.

7. Click Edit.

8. Click Reissue.

9. In the confirmation dialog, click Reissue. The .pem file will be reissued and downloaded.

10. Open the downloaded .pem file in a text editor, copy the entire contents, and close the file.

11. Go to the Jamf PKI Proxy host, open the following file and paste the contents of the downloaded .pem file into it:

    • Linux: ~/.jamf/authorized.pem

    • Windows: C:\Users\<user>\AppData\Local\Jamf\authorized.pem

12. Go to the host of the Jamf PKI Proxy and stop the running Jamf PKI Proxy process.

13. Execute the following command to start the service:

    jamf-pki-proxy start