In order to give you better service, we use cookies. By continuing to use our website, you agree to the use of cookies as described in our Cookie Policy.

Konnect Plus: Pay-as-you-go from startup friendly to enterprise scale. See Pricing →
Kong Logo
search
Konnect Cloud

Renew certificates for a runtime

Certificates generated by Konnect Cloud expire every six months.

Renew your certificates to prevent any interruption in communication between Konnect Cloud and any configured runtimes. If a certificate expires and is not replaced:

  • The runtime stops receiving configuration updates from the control plane
  • The runtime stops sending Vitals and usage data to the control plane

Depending on your setup, renewing certificates might mean bringing up a new data plane, or generating new certificates and updating data planes with the new files.

Quick setup

  1. Stop the data plane container.
  2. Open Runtime Manager and click Configure New Runtime.
  3. Run the script again to create a new data plane with updated certificates.
  4. Remove the old data plane container.

Advanced setup

  1. Open Runtime Manager and click Configure New Runtime.
  2. Click Generate Certificates.

  3. Save the new certificates and key into separate files:

    • Certificate: tls.crt
    • Private key: tls.key
    • Root CA Certificate: ca.crt

  4. Replace existing certificates on your data planes with the new files.

  5. Restart Kong Gateway for the settings to take effect:

     $ kong restart
image