# How to add a custom Certificate in existing AWX environment **URL:** \ **Category:** Get Help\ **Tags:** awx\ **Created:** [March 14, 2024, 2:56pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384 "2024-03-14T14:56:17Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![tapan\_behera](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/tapan_behera/32/2591_2.png) [@tapan\_behera](https://forum.ansible.com/u/tapan_behera)\ **Post date:** [March 14, 2024, 2:56pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/1 "2024-03-14T14:56:18Z")
Hi Team, I need to add custom Certificate in existing AWX environment running on K3S. AWX 23.5.0 K3S Version : v1.28.4+k3s2 Could you please help me for same. Thanks ---
**Author:** ![Dustin](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dustin/32/2573_2.png) [@Dustin](https://forum.ansible.com/u/Dustin)\ **Post date:** [March 14, 2024, 8:26pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/2 "2024-03-14T20:26:22Z")
To know how to help you with that, we’d have to know how you are applying your certificate today. Are you using Traefik and a k3s secret? Are you using traefik without TLS, but have an HTTPS Proxy (Apache, Nginx, TomCat, etc.) handling HTTPS traffic into the pod? Something else? ---
**Author:** ![tapan\_behera](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/tapan_behera/32/2591_2.png) [@tapan\_behera](https://forum.ansible.com/u/tapan_behera)\ **Post date:** [March 15, 2024, 5:36am UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/3 "2024-03-15T05:36:39Z")
Hi Dustin, We have deployed AWX using a Self-Signed generated certificate however now we are planning to use custom certificate. kubectl -n awx get awx,all,ingress,secrets |grep tls secret/awx-secret-tls [kubernetes.io/tls](http://kubernetes.io/tls) 2 534d secret/awx-receptor-ca [kubernetes.io/tls](http://kubernetes.io/tls) 2 404d ---
**Author:** ![Dustin](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dustin/32/2573_2.png) [@Dustin](https://forum.ansible.com/u/Dustin)\ **Post date:** [March 15, 2024, 3:09pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/4 "2024-03-15T15:09:32Z")
If you run through your instructions again. Where it tells you to generate a self signed certificate, instead use your new CA signed certificate and key. Then, when you generate the k3s secret use the new cert and key instead of the self signed. Which part are you stuck on? ---
**Author:** ![tapan\_behera](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/tapan_behera/32/2591_2.png) [@tapan\_behera](https://forum.ansible.com/u/tapan_behera)\ **Post date:** [March 21, 2024, 2:11pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/5 "2024-03-21T14:11:03Z")
Hi Dustin, I have already deployed AWX using self signed certificate and its running fine ,I would like to replace the certificate with other one,is it feasible. ---
**Author:** ![Dustin](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/dustin/32/2573_2.png) [@Dustin](https://forum.ansible.com/u/Dustin)\ **Post date:** [March 21, 2024, 2:56pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/6 "2024-03-21T14:56:10Z")
It is possible. Here is the [kubernetes secret](https://kubernetes.io/docs/tasks/configmap-secret/managing-secret-using-kubectl/) documentation. Put your signed cert and private key into the same directory where you self signed cert and key is stored. If you created your secret using `kubectl create secret...` command, you can update the secret with `kubectl edit secret...` command. If you created your secret using kustomize/delpoy files, update your kustomize/deploy files to point to the new cert and key, and then re-apply your kustomize/deploy file with the `kubectl` command. ---
**Author:** ![system](https://us1.discourse-cdn.com/ansible/original/1X/1882d9a01da5d8996a862359b0913cc568a39b84.svg) [@system](https://forum.ansible.com/u/system)\ **Post date:** [August 29, 2024, 7:34pm UTC](https://forum.ansible.com/t/how-to-add-a-custom-certificate-in-existing-awx-environment/4384/7 "2024-08-29T19:34:45Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.