topic Re: Replacing third party server certificate while Splunk is running: do we need to restart Splunk? in Security https://community.splunk.com/t5/Security/Replacing-third-party-server-certificate-while-Splunk-is-running/m-p/401132#M9721 <P>Hi @burwell,</P> <P>Yes you need to restart splunk to take effect of new certificates.</P> Thu, 27 Sep 2018 12:56:30 GMT harsmarvania57 2018-09-27T12:56:30Z Replacing third party server certificate while Splunk is running: do we need to restart Splunk? https://community.splunk.com/t5/Security/Replacing-third-party-server-certificate-while-Splunk-is-running/m-p/401131#M9720 <P>We use a third party SSL certificate on our heavy forwarders.</P> <OL> <LI>I create my server cert by combining cert + keys + cacert &gt; servercert.pem</LI> <LI>I start up Splunk</LI> <LI>Time goes by and my certificate is going to expire soon. I get a new cert</LI> <LI> I cat together new cert + keys + cacert &gt; servercert.pem and put it in the same file as referenced by Splunk configs</LI> </OL> <P>Question: Do i need to restart Splunk?</P> Wed, 26 Sep 2018 22:54:31 GMT https://community.splunk.com/t5/Security/Replacing-third-party-server-certificate-while-Splunk-is-running/m-p/401131#M9720 burwell 2018-09-26T22:54:31Z Re: Replacing third party server certificate while Splunk is running: do we need to restart Splunk? https://community.splunk.com/t5/Security/Replacing-third-party-server-certificate-while-Splunk-is-running/m-p/401132#M9721 <P>Hi @burwell,</P> <P>Yes you need to restart splunk to take effect of new certificates.</P> Thu, 27 Sep 2018 12:56:30 GMT https://community.splunk.com/t5/Security/Replacing-third-party-server-certificate-while-Splunk-is-running/m-p/401132#M9721 harsmarvania57 2018-09-27T12:56:30Z