Updating Agent certificate
Agent certificates have an expiration date, so they need to be updated regularly. For PaaS Agents the update is automatic and doesn't require any action. For Self Hosted Agents the update needs to be done manually. You can see when the certificate is about to expire from Control Panel. There will be a yellow warning next to the "Help" button and clicking it will show information about which Agents' certificate is about to expire.
If you are using a TLS/SSL certificate in the Self Hosted Agents, update of the certificate is done in two parts. First you need to update the certificate in the Agent itself and then add the new certificate thumbprint in Frends. You need to add the new certificate to an Agent's Local Machine Personal Store. It is also advised to add the certificate to Trusted Root Storage so the Frends Agent will trust it.
After you have added the new certificate to the Agent you need to add the new certificate's thumbprint to Frends. This can be done from an Agent's settings at the Environments View. You can change the thumbprint used for the Agent's certificate and then save the changes.
After saving the changes the Agent Service needs to be reinstalled to take the new certificate into use. You can do this by downloading the new installer package and running it in the Agent. As when updating Agents, it is advised to shut down the Agent Service before re-installing the Agent to avoid starting new Processes in the Agent. After Agent re-installation the Agent will use the new certificate with Frends. The warning about certificate expiration should have vanished. After updating the certificate, you should monitor Processes using a HTTP or API Trigger to ensure that they are working as expected.
The next article is Introduction to Updating Environment Variables