# Renewing external certificates

You must renew the external certificates of SMC components before they expire.

All certificates have a validity start date (“not before”) and a validity end date (“not after”).

Pre-requisites:

You must have the external Certificate Authority (CA) configured.

Note:

- This is the certificate authority that is used to sign certificate requests.
- SMC does not control the certificate validity time for externally signed certificates. The certificate validity time is dependent on the external CA configuration.

To renew an externally signed certificate, do the following steps:

1. Check the expiration date of the external certificate.
2. Renew the external certificate for the following components:
   - Management server. For more details, refer to the Renew external certificate for the Management Server topic.
   - Log server. For more details, refer to the Renew external certificate for the Log Server topic.
   - Engine. For more details, refer to the Renew external certificates for the Engine topic.
   - Web Access Server. For more details, refer to the Renew external certificates for the Web Access Server topic.