> For the complete documentation index, see [llms.txt](https://documentation.2pintsoftware.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.2pintsoftware.com/deployr/1.2/setup-deployr-community/what-about-certificates.md).

# What about certificates?

The DeployR Community installation process will automatically create a TLS certificiate that can be used for secure HTTPS communication.  This certificate is generated by 2Pint Software via an online service.  The certificiate, along with the trusted root certificate (public key only, no private key), is automatically stored in the machin'e certificate store, and used everywhere HTTPS communication is needed (e.g. client devices communicating with the DeployR server; administration via the StifleR Dashboard; communication between the 2Pint Software products; downloading of files from the 2PXE server; etc.).

The generated certificate is automatically trusted by iPXE, used in the 2PXE boot process.  (Internal PKI certificates would not be trusted by default, although certificates issued by a public provider would be.) This certificate is also automatically included in the generated Windows PE boot images used by DeployR, so no additional configuration is needed to add the certficate to the boot images.

The default lifetime of this generated certificate is 90 days.  Before that time is up, you can renew the certificate by running (from an elevated command prompt) the TwoPint.DeployR.CertRenew\.exe program located in C:\Program Files\2Pint Software\DeployR\WebServer. &#x20;

A future DeployR Community update will automate this renewal process.

You may notice that accessing the administrative web page (e.g. "https\://\<fqdn>:9000/dashboard") shows a TLS or HTTPS error when accessed from a different computer.  This is because the trusted root certificate added to the computer by the installation process is not present on other machines.  You can manually export the certificate from the DeployR Community server:

<figure><img src="/files/HlmgZdxd224bl1nILJ10" alt=""><figcaption></figcaption></figure>

And then import that certificate into any other computer's "Trusted Root Certification" store to avoid the browser error, or you can tell the browser to continue to the site anyway.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.2pintsoftware.com/deployr/1.2/setup-deployr-community/what-about-certificates.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
