> This page is for Tools.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.moveworks.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.moveworks.com/_mcp/server.

# Rotating a Certificate for an On-Prem Agent

This guide describes how to update the cert that your on-prem agent uses to establish connections with Moveworks cloud, LDAP/Active Directory over SSL or StartTLS, or an on-prem REST system.

1. Find the path to the existing cert: navigate to `moveworks/config` and run `cat agent_config.yml` to view `path_to_cert`.
   * Use `pwd` to print the working directory, `cd ..` to go up a folder, and `ls` to list all folders.
2. Replace the cert at the `path_to_cert` location.
   * Note: If you choose put the cert in a NEW location, you must also [reconfigure your agent](/tool-studio/moveworks-agent/moveworks-agent-configuration-guides/reconfiguring-an-existing-agent) to update the path to the cert.
3. Restart the agent using the following [commands](/tool-studio/moveworks-agent/operations-maintenance-guide#common-commands):
   * Run `sudo ./setup_agent.sh --stop`, then `sudo ./setup_agent.sh --start`.
   * Confirm that the agent restarted correctly by checking the agent log files: `tail -f /var/log/moveworks/*.INFO.log`