Update SSL certificate
task australia Updated Sep 10, 2026 1 min read update-ssl-certificate.md
When updating an SSL certificate on an Edge proxy server, you must delete the old one.
Before you begin
Role required: admin
About this task
When updating the SSL certificate on the Edge proxy server, you must also delete the old certificate. If you don't, the old certificate (in the form of an alias in the KeyStore file) continues to be used even though the Edge proxy server is configured to use the new certificate.
Procedure
-
On the Edge proxy server, list the entries in the Java KeyStore:
Shellkeytool -list -keystore keystore.jceks -storetype jceks -storepass MY_SUPER_PASSWORD -
Remove the old SSL certificate:
Shellkeytool -delete -alias MY_OLD_ALIAS -keystore keystore.jceks -storetype jceks -storepass MY_SUPER_PASSWORD -
Add the new SSL certificate into the Java KeyStore.
Parent Topic:Install the Edge Encryption proxy server using the interactive installer
Previous topic:Configure the AES 256-bit encryption key
Next topic:Configure the Edge Encryption proxy database
50 lines · 2.0 KB
---
title: Update SSL certificate
description: When updating an SSL certificate on an Edge proxy server, you must delete the old one.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/edge-encryption/update-ssl-certificate.html
release: australia
product: Edge Encryption
classification: edge-encryption
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Install the Edge Encryption proxy server using the interactive installer, Installing Edge Encryption, Edge Encryption, Encryption]
---
# Update SSL certificate
When updating an SSL certificate on an Edge proxy server, you must delete the old one.
## Before you begin
Role required: admin
## About this task
When updating the SSL certificate on the Edge proxy server, you must also delete the old certificate. If you don't, the old certificate \(in the form of an alias in the KeyStore file\) continues to be used even though the Edge proxy server is configured to use the new certificate.
## Procedure
1. On the Edge proxy server, list the entries in the Java KeyStore:
```
keytool -list -keystore keystore.jceks -storetype jceks -storepass MY_SUPER_PASSWORD
```
2. Remove the old SSL certificate:
```
keytool -delete -alias MY_OLD_ALIAS -keystore keystore.jceks -storetype jceks -storepass MY_SUPER_PASSWORD
```
3. Add the new SSL certificate into the Java KeyStore.
**Parent Topic:**[Install the Edge Encryption proxy server using the interactive installer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/edge-encryption/proxy-installer.md)
**Previous topic:**[Configure the AES 256-bit encryption key](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/edge-encryption/configure-256-key.md)
**Next topic:**[Configure the Edge Encryption proxy database](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/edge-encryption/configure-proxy-db.md)
| title | Update SSL certificate |
| description | When updating an SSL certificate on an Edge proxy server, you must delete the old one. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/platform-security/edge-encryption/update-ssl-certificate.html |
| release | australia |
| product | Edge Encryption |
| classification | edge-encryption |
| topic_type | task |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | Install the Edge Encryption proxy server using the interactive installerInstalling Edge EncryptionEdge EncryptionEncryption |