# Rotate Certificates

A certificate/key pair is used in **MQTT mTLS** connections to the **TilliT IoT Cloud**. It's important that the keys for this connection are kept safe and secure. For this reason, all certificate/key pairs can only be downloaded once at the time of creation. If you lose your certificate, or you would like to swap out the certificates for your connection, you can use the **Manage Certificates** screen to achieve this.

## Create a new Certificate

Open an edge, and navigate to the **Manage Certificates** screen by using the **Actions** button

<figure><img src="/files/r3MVEHbrCMwkCifoBnbE" alt=""><figcaption></figcaption></figure>

On the following screen you will see existing certificates for the edge. To create a new one, click on **Create Certificate**

<figure><img src="/files/dFGVWofrJSYhden1S7fV" alt=""><figcaption></figcaption></figure>

After the request to create completes, your browser will automatically download the created certificate. Be sure to save it

<figure><img src="/files/a38lVUJsE5k300CuCySI" alt=""><figcaption></figcaption></figure>

You will also see the new certificate in the list. This list is always ordered by oldest first, and the name of the ID of the certificate is also located on the .zip file

<figure><img src="/files/qHoQWyQzcW6A9H5Aij78" alt=""><figcaption></figcaption></figure>

## Remove the old Certificate

A maximum of two certificates can be associated to an edge. This allows for a new certificate to be created and then swapped out with the old one. Once this has been completed, the old certificate should be removed.

When multiple certificates are listed, a red cross will be visible to choose a certificate to remove. Click the the red cross to remove the appropriate certificate.

<figure><img src="/files/r8BMY53k9H2ScuNe7NIZ" alt=""><figcaption></figcaption></figure>

A confirmation dialog will appear. Click **Delete** to confirm the action

<figure><img src="/files/tQCa1lf13GyNWUjzSRN0" alt=""><figcaption></figcaption></figure>

Now, the list of certificates shows only one certificate.

<figure><img src="/files/5VOyWkE4XWYRfIBW3D5j" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.tillit.cloud/tillit/knowledge-base/setting-up-tillit/edge/advanced-topics/rotate-certificates.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.