This article explains to check / update system generated certifiate file in SRX HA setup.

For users who needs to check the detail and update system generated certificate in SRX HA.

Under SRX HA setup, certifiate files are used via RG0 primary node.

To confirm the detail of the cert file, execute cmd below,

show security pki local-certificate system-generated

To update the system generated cert file, issue with "clear" cmd below,

clear security pki local-certificate system-generated

• there is no way to confirm the cert detail on RG0 secondary node
• to confirm the cert in secondary node, need to be RG0 primary with failover
• same as, clear cmd works on the RG0 primary node iself
• in case updating the cert file on RG0 secondary node is required, need to do RG0 failover first