.. _renew_single_sign-on-certificate_for_voss-4-uc:

Renew Single Sign-On Certificate for VOSS Automate
---------------------------------------------------

If a customer's Single Sign-on certificate expires, then
to renew the certificate for VOSS Automate:

1. Follow the steps to regenerate the certificate (either self-signed or CA signed) as
   described in :ref:`sso-certificate-management`.
#. Follow the steps to regenerate and upload SP metadata to the IdP described in
   :ref:`configure_single_sign-on_for_voss-4-uc`.

   Note:

   If an expired SSO certificate is being renewed and the IdP metadata has
   *not* changed, then the download, configure and upload of the IdP metadata
   is not required and these steps can be ignored.