Select and renew
Renew a subset of certificates from a completed batch enrollment job while reusing their existing key pairs. This option allows you to selectively renew certificates without creating a new certificate profile or uploading new CSRs.
Use this option when you need to renew certificates for only part of a device fleet, such as active devices, specific business units, or devices that are approaching certificate expiration.
Tip
Use this method when you need to renew certificates for only a portion of a batch enrollment job while retaining the existing key pairs. This method is useful for excluding decommissioned devices, inactive endpoints, or devices that don't currently require renewal.
In the Device Trust Manager, go to Jobs > Batch certificates.
All the Batch certificate jobs are listed in a table format.
Select the Batch certificate job to renew its associated certificates in bulk.
Select More actions > Renew batch.
Chose Select and renew to select and renew every eligible certificate in this batch job.
Select Download CSV and save the CSV file.
Open the downloaded CSV file in a spreadsheet application or a text editor to edit it.
Edit the CSV file to review the certificates included in the renewal job and remove any certificates that you don't want to renew.
Let op
Editing CSV file guidance:
Don't delete or rename any columns or column headers. Keep the Unique identifier, Common Name, Serial number, and Expiry date columns unchanged
The Unique identifier column is used to match each CSV entry to the corresponding certificate from the original batch enrollment job
To exclude a certificate from renewal, delete the entire row for that certificate
When you upload the CSV file, Device Trust Manager processes only the rows that remain in the file. Certificates associated with deleted rows aren't included in the renewal job
Save the updated file in a CSV format.
Return to the renewal workflow and upload the modified CSV file.
Select Start renewal.
What happens next
The selected certificates are renewed using their existing key pairs. Certificates removed from the CSV file aren't included in the renewal job
To see the renewed batch job, go to Jobs > Batch certificates and review its Status
To download the batch report in CSV format, go to Jobs > Batch certificates > select the renewed batch job <More actions > Download batch report
To review which certificates were renewed, skipped, or failed, open the renewed batch job and review the job summary