What happens when a certificate is about to expire?
Managed devices renew themselves. The same SCEP exchange that issued the certificate runs again before it expires, with no interruption to the device and nothing for you to do.
Passbeam also warns you about anything approaching expiry that has not renewed, on the client page and by email, because the interesting case is a device that has stopped checking in — a laptop in a drawer will come back one day with a certificate that no longer works, and you would rather know before its owner does.
Related questions
- Why does every device need the Trusted Root CA installed?
- What is SCEP, and how does it work?
- Can I use Jamf, Mosyle, Kandji or another MDM instead of Intune?
- Device certificates or user certificates — what is the difference?
- Can I change a client's certificate mode after setup?
- Can I use Passbeam for a network with no Entra ID at all — printers, cameras, door access, building controls?
- How do I set up printers, CCTV, BMS and IoT devices that support 802.1X?
Still stuck? Ask us, or read the rest of the knowledge base.