Renewing a Venafi Certificate

You can manually redistribute the configuration profile associated with the certificate by editing and saving the profile in Jamf Pro (you do not actually need to make any changes to the profile). Redistributing the configuration profile will issue a new certificate to the devices that are in the configuration profile's scope.

Jamf Pro automatically redistributes the certificate via a configuration profile 10 days before the certificate expires. If the 10-day default setting does not meet your needs, contact Jamf Support.

  1. In Jamf Pro, click Settings in the top-right corner of the page.
  2. In the Global Management section, click PKI Certificates .
  3. In the row for the CA containing the certificate you want to redistribute, click the number in the Expiring, Active, Inactive, or All column to view a list of the certificates.
  4. Click the certificate in the Certificate Subject column you want to renew.
  5. At the bottom of the page, click the configuration profile that is associated with the certificate.
  6. Click Edit .

    You do not need to make any changes to the configuration profile.

  7. Click Save .
  8. On the Redistribution Options pane, click Distribute to All.
The configuration profile is redistributed to all computers or mobile devices that are in scope the next time the devices check in to Jamf Pro.