# AES - Renew AES Cert using System Manager
AES certificate renewal if using SMGR certificate with CA Certificate and End Entity in place.
\*This work will need a maintenance window for restarts of the AES.
1. Remove Certificate that is about to expire from AES.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/OEWH0V9UuQH2KFUe-image.png)
2. Restart AE Server
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/OCl8EDaHYqHwm27z-image.png)
3. Go to the System Manager> Security> Certificates> Authority> Search End Entities
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/LV6WqKC6YNN3qhQB-image.png)
4. Verify the certificate for your AES by the CN and select *Edity End Entity *
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/tNyeMzh9BN04Ie7T-image.png)
*
*
5. Change the status to New, enter the passwords and then Save
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/KCnfvmZMYjQ8wrpw-image.png)
6. Scroll to the bottom of the page and select *Public Web.*
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/RnHQI7rf3S3Do89H-image.png)
7. Select Create Keystore and then enter the username and password from the End Entity and select OK.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/oPtHpKYwZhRnVlaf-image.png)
8. Select 2048 bits and then Select Enroll.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/soDAwrWf0izhGwdf-image.png)
Once you click enroll the certificate will be downloaded (depending on your browser you can select where it is saved or find it in downloads from windows explorer.
**Next Import the new AE Services server certificate into the AES**
1. Using the AE Services Management Console navigate to "Security > Certificate Management > Server Certificates"
2. Click on the Import button and upload the new AE Services server certificate you created above (this will be the .p12 file). Select an alias (server) from the drop down menu
3. Click the "Apply" button.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/j4JDHpTKInEAIzEH-image.png)
4. Select Choose file, Establish Chain of Trust and Certificate Alias.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/LXfNW1MIFK3bBc6w-image.png)
5. Enter the PKCS12 password (from the End Entity) and select Apply and then on the next page Apply again.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/iJptZyEFhYD7VQOX-image.png)
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/WtapXa5hN6ySgREj-image.png)
6. Restart the Linux server.
[](https://wiki.tinod.net/uploads/images/gallery/2023-04/n4fb8J4NLCH7hwb9-image.png)