What happens when a certificate is about to expire?
Managed devices renew themselves. The same SCEP exchange runs again before the certificate expires. The device stays connected and there's nothing for you to do.
Appliances that enrol over EST renew themselves too. See "Can an appliance get and renew its own certificate?".
Passbeam also warns you, on the client page and by email, about any certificate close to expiry that hasn't renewed. It usually means a device has stopped checking in, like a laptop in a drawer that will come back with a certificate that no longer works.
Related questions
- Why does every device need the Trusted Root CA installed?
- What is SCEP, and how does it work?
- Can I use Jamf, Mosyle, Kandji or another MDM instead of Intune?
- Device certificates or user certificates: what's the difference?
- Can I change a client's certificate mode after setup?
- Can I use Passbeam for a network with no Entra ID at all, such as printers, cameras, door access or building controls?
- How do I set up printers, CCTV, BMS and IoT devices that support 802.1X?
- Can an appliance get and renew its own certificate?
- Can I use our existing certificate authority instead of yours?
Still stuck? Ask us, or read the rest of the knowledge base.