---
title: "computecluster rotate-base-certificates"
slug: "computecluster-rotate-base-certificates"
tags: ["5.5"]
updated: 2026-10-27T23:00:54Z
published: 2026-10-27T23:00:54Z
canonical: "docs.vastdata.com/computecluster-rotate-base-certificates"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vastdata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# computecluster rotate-base-certificates

> [!NOTE]
> Note
> 
> Rotation of root CA certificate is not supported.

This command retains the current root CA certificate and rotates the intermediate CA certificate, intermediate private key, and leaf certificates. You can choose to autogenerate the new certificates or provide new ones.

## Usage

```plaintext
computecluster rotate-base-certificates --id ID
                                       [--intermediate-certificate INTERMEDIATE-CERTIFICATE --intermediate-key INTERMEDIATE-KEY]
```

## Required Parameters

| `--id ID` | Specifies a VAST compute cluster by its ID |
| --- | --- |

## Options

| `--intermediate-certificate INTERMEDIATE-CERTIFICATE` | PEM-encoded intermediate certificate. If provided, `--intermediate-key INTERMEDIATE-KEY` must also be provided. Specify `INTERMEDIATE-CERTIFICATE` as the content of the certificate file. |
| --- | --- |
| `--intermediate-key INTERMEDIATE-KEY` | PEM-encoded intermediate private key. If provided, `--intermediate-certificate INTERMEDIATE-CERTIFICATE` must also be provided. Specify `INTERMEDIATE-KEY` as the content of the certificate file. |

## Example

```plaintext
vcli: admin> computecluster rotate-base-certificates --id 1 --intermediate-certificate "-----BEGIN CERTIFICATE-----\nMIIDYzCCAkugAwIBAgIEXampleIntermediateCert...\n-----END CERTIFICATE-----" --intermediate-key "-----BEGIN PRIVATE KEY-----\nMIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSj...\n-----END PRIVATE KEY-----"
```