Renewing Client Certificates on Devices

Article Number:02059
Intended audience: cybozu.com Administrators

You cannot extend the expiration dates of existing client certificates.
When you want to continue using Client Certificate Authentication, reissue a client certificate and install it on the devices again.

Expiration date of client certificate

The client certificate is valid for a maximum of 3 years. The expiration date of a client certificate is based on the time zone of the administrator who issued the certificate.

When a client certificate has expired, users can no longer access cybozu.com.
However, users might still be able to access the services during the session's lifetime because Safari iPhone version keeps the cache of the session.

When the Client Certificate Is within Its Validity Period

Issue a new client certificate for a user while keeping the user's current client certificate valid, and install the new client certificate on their device again.

  1. Click the gear-shaped menu button in the header.

  2. Click Users & System Administration.

  3. Click Create & Download. Screenshot: "Create & Download" is highlighted

  4. Select the department to which a target user belongs.
    When the target user does not belong to any department, select "Users Not Yet Assigned" or "All Users". Screenshot: The department containing the target user is selected

  5. Select "Valid". Screenshot: "Valid" is selected

  6. Select the checkbox for the target user.
    You can select multiple users. Screenshot: The checkbox of the target user is selected

  7. Set the expiration date of the client certificate. Screenshot: The expiration date field is highlighted

  8. Clear the "Remove existing certificates before re-issuing them" checkbox. Screenshot: The "Remove existing certificates before re-issuing them" checkbox is cleared

  9. Click Create.

  10. Install the client certificate on the user's device.
    Installing Client Certificates on Devices

When the Client Certificate Has Expired

Reissue a client certificate and install it on the devices again.

  1. Click the gear-shaped menu button in the header.

  2. Click Users & System Administration.

  3. Click Create & Download. Screenshot: "Create & Download" is highlighted

  4. Select the department to which a target user belongs.
    When the target user does not belong to any department, select "Users Not Yet Assigned" or "All Users". Screenshot: The department containing the target user is selected

  5. Select "Expired". Screenshot: "Expired" is selected

  6. Select the checkbox for the target user.
    You can select multiple users. Screenshot: The checkbox of the target user is selected

  7. Set the expiration date of the client certificate. Screenshot: The expiration date field is highlighted

  8. Click Create.

  9. Install the client certificate on the user's device.
    Installing Client Certificates on Devices