Tunnel Certificate renew pre Expiration Date

[YvesChristoph]

Hello,

we need to renew our frontend tunnel certificate befor its Expiration Date.

My Question is, can i renew the certificate without down time (more than 5 or 10 MInutes) and without to reinstall the Tunnel Server?

Our Configuration:
- WOne 1903 on Prem
- UAG 3.5 Relay + Endpoint (HA)

Regards,
Yves C.

[LukasSchfer]

Hi,
you can renew the certificate in the console and restart the vpnd service on the UAG.
If everything is correct configured, the UAG should fetch the certificiate from the console. Maybe you need to repush the tunnel profile to the devices, that they get the certificate.

[chengtmskcc]

Yves, what's the main reason in choosing Enterprise CA cert over the AirWatch issued cert? Security?