[ATP/FLEX]How do I renew IKEV2 certificate

Options
Zyxel_Kevin
Zyxel_Kevin Posts: 988 image  Zyxel Employee
Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 500 Comments
edited June 24 in VPN

Question:

How do I renew IKEV2 certificate?

Configuration steps:
When the IKEv2 IPSec Client VPN certificate expires, follow these steps:

  1. Disable and enable IPSEC remote VPN on Nebula GUI.
  2. The firewall will re-generate a new certificate.
  3. Reinstall the new VPN script.
  4. Reboot the Firewall

Note:
1)Starting from 15th April 2024, the IKEv2 IPSec Client VPN certificate validity period has been extended to 10 years
2)It only works when your VPN certificate is really expired. If you want to renew ahead of expired, please contact Zyxel Support