# Are there any plans to update the SSL certificate of OneAgent in the future? **URL:** \ **Category:** Open Q&A\ **Tags:** installation, oneagent\ **Created:** [March 20, 2018, 12:54am UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568 "2018-03-20T00:54:21Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![kohei-saito](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/kohei-saito/32/24190_2.png) [@kohei-saito](https://community.dynatrace.com/u/kohei-saito)\ **Post date:** [March 20, 2018, 12:54am UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/1 "2018-03-20T00:54:21Z")
Hi, On installation of Linux OneAgent, we are asked to verify signature like this: ```auto Verify signature:
wget https://ca.dynatrace.com.... ``` Once we have installed OneAgent with this certificate, I think we don’t have to update the certificate for a while, but are there any plans to update the SSL certificate of OneAgent at some future time? If you have those plans, please let me know how often and when you update it. Thanks, Kohei ---
**Author:** ![JamesKitson](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jameskitson/32/22460_2.png) [@JamesKitson](https://community.dynatrace.com/u/JamesKitson)\ **Post date:** [March 20, 2018, 3:49pm UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/2 "2018-03-20T15:49:50Z")
I believe that command to verify the signature is just best practice to ensure there were no issues with the installer and that is in the true installer from Dynatrace that was obtained, it is not mandatory per se. The Security Gateways and Cluster nodes are what have the certificates - the OneAgent itself does not have or need any certificate. James ---
**Author:** ![kohei-saito](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/kohei-saito/32/24190_2.png) [@kohei-saito](https://community.dynatrace.com/u/kohei-saito)\ **Post date:** [March 26, 2018, 5:33am UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/3 "2018-03-26T05:33:17Z")
Hi, James Thanks your comment. I see. This signature is optionally needed only on installation of OneAgent and it doesn’t matter to the running OneAgent whether the certificates are updated or not. Is my understanding correct? Thanks, Kohei ---
**Author:** ![JamesKitson](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jameskitson/32/22460_2.png) [@JamesKitson](https://community.dynatrace.com/u/JamesKitson)\ **Post date:** [March 26, 2018, 6:23pm UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/4 "2018-03-26T18:23:16Z")
I believe OneAgents handle all of that without manual intervention. Accessing the UI via a browser and a few other scenarios are when a valid SSL certificate becomes important. Note that if you let Dynatrace manage the certificates I believe it automatically updates the certificates via Let’s Encrypt over time so this wouldn’t be a concern at all. [https://www.dynatrace.com/support/help/installation/monitoring-setup/what-are-the-available-communication-endpoints/#recap](https://www.dynatrace.com/support/help/installation/monitoring-setup/what-are-the-available-communication-endpoints/#recap) ---
**Author:** ![kohei-saito](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/kohei-saito/32/24190_2.png) [@kohei-saito](https://community.dynatrace.com/u/kohei-saito)\ **Post date:** [March 29, 2018, 4:26am UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/5 "2018-03-29T04:26:07Z")
Hi James, Thanks for your answers. I’m getting to understand. When we download installers, we can optionally download the signature. It is used for the installation of OneAgent, and it has nothing to do with the connection between installed OneAgent/Private Security Gateway and SaaS Cluster,so we don’t have to worry, right? ---
**Author:** ![adam\_gardner](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/adam_gardner/32/20087_2.png) [@adam\_gardner](https://community.dynatrace.com/u/adam_gardner)\ **Post date:** [March 29, 2018, 7:50am UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/6 "2018-03-29T07:50:11Z")
Step 2 of the wizard (verifying the signature) is optional. Steps 1 and 3 are the mandatory ones - wget the sh script and run it. ---
**Author:** ![kohei-saito](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/kohei-saito/32/24190_2.png) [@kohei-saito](https://community.dynatrace.com/u/kohei-saito)\ **Post date:** [March 30, 2018, 1:28am UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/7 "2018-03-30T01:28:26Z")
Hi [@Adam G.](https://answers.dynatrace.com/users/3001/view.html), Thanks. Yes, as you said, step 1& 3 are mandatory and step 2 is optional. I didn’t seem to understand that well. The signature is mandantory, so that means it is not used for connection between OneAgent which has been installed and the Dynatrace SaaS Cluster. @James.K, I’m sorry for my lack of understanding. I understand what you said. I appreciate your kind cooperation! Kohei ---
**Author:** ![derek\_darling](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/derek_darling/32/17734_2.png) [@derek\_darling](https://community.dynatrace.com/u/derek_darling)\ **Post date:** [July 17, 2018, 7:49pm UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/8 "2018-07-17T19:49:43Z")
Hi James, Does the UI (nginx) and the Agent traffic (Security Gateways & The Dynatrace Server on the node) require two different certificates? ---
**Author:** ![JamesKitson](https://dub1.discourse-cdn.com/dynatrace/user_avatar/community.dynatrace.com/jameskitson/32/22460_2.png) [@JamesKitson](https://community.dynatrace.com/u/JamesKitson)\ **Post date:** [July 17, 2018, 8:31pm UTC](https://community.dynatrace.com/t/are-there-any-plans-to-update-the-ssl-certificate-of-oneagent-in-the-future/11568/9 "2018-07-17T20:31:10Z")
I haven’t dealt with that extensively yet, I’ll update if I come across anything. I imagine since the traffic is all sent HTTPS it definitely needs a valid cert to be secure but dunno about the details of managing that manually. Like nginx might be able to share the cert with the server or something like that.