Title: Renew a custom TLS certificate
Author: WordPress VIP Documentation
Published: December 7, 2023
Last modified: June 10, 2025

---

 1. [TLS](https://docs.wpvip.com/tls/)
 2. [Install a custom TLS certificate](https://docs.wpvip.com/tls/custom-cert/)
 3. Renew a custom TLS certificate

#  Renew a custom TLS certificate

Custom TLS certificates that are installed for a domain should be renewed by the
customer prior to their expiration date. The expiration date for a domain’s TLS 
certificate is displayed in the column labeled “**Certificates**” in the **Domains&
TLS** panel of the VIP Dashboard.

 * A generated custom TLS certificate must [meet all of the requirements](https://docs.wpvip.com/custom-tls-cert/requirements/)
   in order to be successfully installed.
 * The new TLS certificate must be procured from the customer’s certificate authority.
 * Though not required, it is strongly recommended to generate a new CSR for an 
   updated TLS certificate for heightened security.

There is no downtime for a custom TLS certificate during the renewal process.

## Access

**Prerequisite**

Installing a TLS certificate for a domain in the VIP Dashboard requires a user to
have at minimum an [Org member role](https://docs.wpvip.com/manage-user-access/vip-dashboard/org-roles/)
or an [App write role](https://docs.wpvip.com/manage-user-access/vip-dashboard/org-roles/)
for that application.

 1. Navigate to the [VIP Dashboard](https://dashboard.wpvip.com/) for the application
    that the domain is associated with.
 2. Select the environment that the domain points to (e.g., Production, Develop) from
    the dropdown located at the upper left of the dashboard.
 3. Select “**Domains & TLS**” from the sidebar navigation at the left of the screen.
 4. Select the three dots (“**···**“) to the right of the domain for which the custom
    TLS certificate applies.
 5. Select the option “**Install Custom Certificate**” from the dropdown.

## Install the new custom TLS certificate

 1. Select the button labeled “**Renew Certificate**” displayed in “Step 5 of 5” of
    the previously installed certificate. The custom certificate installer will return
    to an earlier step in the installation process for the domain. An option to generate
    a new CSR for a certificate renewal will be available for [custom TLS certificates that use a VIP CSR](https://docs.wpvip.com/custom-tls-cert/custom-tls-vip-csr/).
 2.  Follow the prompts to complete the installation process for the renewed certificate
    provided by the certificate authority.

To prevent downtime, the previously installed TLS certificate will remain active
until all 5 steps have been completed for the updated certificate installation.

Last updated: June 10, 2025