// Module included in the following assemblies:
//
// * microshift_troubleshooting/microshift-responsive-restarts-cas.adoc

:_mod-docs-content-type: CONCEPT
[id="microshift-certificate-rotation_{context}"]
= Certificate rotation

[role="_abstract"]
Certificates that are expired or close to their expiration dates must be rotated to ensure continued {microshift-short} operation. Certificate rotation can occur automatically.

When {microshift-short} restarts for any reason, certificates that are close to expiring are rotated. A certificate that expires soon, or has already expired, can also cause an automatic {microshift-short} restart to perform a rotation.

[IMPORTANT]
====
If the rotated certificate is a {microshift-short} certificate authority (CA), all signed certificates are also rotated. If you created custom CAs, you must rotate them manually.
====
