Use the re-enroll-trigger-time statement to set the percentage of the validity period before expiration at which reenrollment occurs. To specify the reenroll trigger time, include the following statement at the [edit security pki auto-re-enrollment certificate-id certificate-name] hierarchy level:
- [edit security pki auto-re-enrollment certificate-id certificate-name]
-
re-enroll-trigger-time percentage;
percentage is the percentage for the reenroll trigger time. The range can be from 1 through 99 percent.