{
  "schema_version": 2,
  "id": "operate/rs/references/cli-utilities/rladmin/cluster/certificate",
  "title": "rladmin cluster certificate",
  "url": "https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/cluster/certificate/",
  "summary": "Sets cluster certificates.",
  "tags": [
    "docs",
    "operate",
    "rs"
  ],
  "last_updated": "2026-09-24T10:14:21+01:00",
  "page_type": "content",
  "content_hash": "dca63f120bc76c4593042fc46b83ed2dbcda86f67fc6aaeb11214e0404b72741",
  "sections": [
    {
      "id": "cluster-certificate-set-certificate_name",
      "title": "`cluster certificate set <certificate_name>`",
      "role": "overview",
      "text": "Sets a cluster certificate to a specified PEM file.\n\n[code example]\n\nTo set a certificate for a specific service, use the corresponding certificate name. See the [certificates table](https://redis.io/docs/latest/operate/rs/security/certificates) for the list of cluster certificates and their descriptions."
    },
    {
      "id": "parameters",
      "title": "Parameters",
      "role": "parameters",
      "text": "| Parameter | Type/Value | Description |\n|-----------|------------|-------------|\n| certificate_name | 'cm'<br /> 'api'<br /> 'proxy'<br /> 'syncer'<br /> 'metrics_exporter' | Name of the certificate to update. See the [certificates table](https://redis.io/docs/latest/operate/rs/security/certificates) for descriptions. |\n| certificate_file | filepath | Path to the certificate file |\n| key_file | filepath | Path to the key file (optional) |"
    },
    {
      "id": "returns",
      "title": "Returns",
      "role": "returns",
      "text": "Reports that the certificate was set to the specified file. Returns an error message if the certificate fails to update."
    },
    {
      "id": "example",
      "title": "Example",
      "role": "example",
      "text": "Update the proxy certificate:\n\n[code example]"
    },
    {
      "id": "cluster-certificate-set-internal",
      "title": "`cluster certificate set internal`",
      "role": "content",
      "text": "Sets [customer-provided internode encryption certificates](https://redis.io/docs/latest/operate/rs/security/encryption/internode-encryption#customer-provided-certificates).\n\n[code example]"
    },
    {
      "id": "parameters-1",
      "title": "Parameters",
      "role": "parameters",
      "text": "| Parameter | Type/Value | Description |\n|-----------|------------|-------------|\n| dpine_certificate_file | filepath | Path to the data plane internode encryption (DPINE) certificate file |\n| dpine_key_file | filepath | Path to the data plane internode encryption (DPINE) key file |\n| cpine_certificate_file | filepath | Path to the control plane internode encryption (CPINE) certificate file |\n| cpine_key_file | filepath | Path to the control plane internode encryption (CPINE) key file |"
    },
    {
      "id": "returns-1",
      "title": "Returns",
      "role": "returns",
      "text": "Reports that the internal certificates were set to the specified files. Returns an error message if the certificates fail to update."
    },
    {
      "id": "example-1",
      "title": "Example",
      "role": "example",
      "text": "Set up [customer-provided internode encryption certificates](https://redis.io/docs/latest/operate/rs/security/encryption/internode-encryption#customer-provided-certificates):\n\n[code example]"
    }
  ],
  "examples": [
    {
      "id": "cluster-certificate-set-certificate_name-ex0",
      "language": "sh",
      "code": "rladmin cluster certificate set <certificate_name>\n        certificate_file <filepath>\n        [ key_file <filepath> ]",
      "section_id": "cluster-certificate-set-certificate_name"
    },
    {
      "id": "example-ex0",
      "language": "sh",
      "code": "$ rladmin cluster certificate set proxy \\\n       certificate_file /tmp/proxy.pem\nSet proxy certificate to contents of file /tmp/proxy.pem",
      "section_id": "example"
    },
    {
      "id": "cluster-certificate-set-internal-ex0",
      "language": "sh",
      "code": "rladmin cluster certificate set internal\n        dpine_certificate_file <filepath>\n        dpine_key_file <filepath>\n        cpine_certificate_file <filepath>\n        cpine_key_file <filepath>",
      "section_id": "cluster-certificate-set-internal"
    },
    {
      "id": "example-1-ex0",
      "language": "sh",
      "code": "$ rladmin cluster certificate set internal \\\n       dpine_certificate_file /tmp/dpine_cert.pem \\\n       dpine_key_file /tmp/dpine_key.pem \\\n       cpine_certificate_file /tmp/cpine_cert.pem \\\n       cpine_key_file /tmp/cpine_key.pem",
      "section_id": "example-1"
    }
  ]
}