Certificate lifetime

Certificate rotation is handled automatically by the Grid but can be triggered manually when necessary.

This table lists the Grid certificates, their respective lifetimes, and when they are rotated.

Type	Lifetime	Rotation date	Notifications
Root	10 years	2 years before expiration	When rotated
HTTPS (internal)	365 days	30 days before expiration	When rotated
HTTPS (imported signed by external)	Decided by external CA	Rotated manually	Warning 30 days before expiration
Client	180 days minimum and 365 days maximum	Rotated manually	Warning 30 days before expiration
Server	90 days	30 days before expiration	Only in logs