Export certificates

Use the export certificate command to backup the certificate that Octopus Server uses to authenticate itself with its Tentacles.

Export certificate options

Usage: Octopus.Server export-certificate [<options>]

Where [<options>] is any of:

      --instance=VALUE       Name of the instance to use
      --config=VALUE         Configuration file to use
      --export-pfx=VALUE     The filename to which to export the certificate
      --pfx-password=VALUE   The password to use for the exported pfx file
      --type=VALUE           Sets which certificate will be exported. Valid
                               options are: 'tentacle' or 'grpc'. Default:
                               'tentacle'

Or one of the common options:

      --help                 Show detailed help for this command

Basic examples

Exporting Tentacle certificate

This example exports the certificate that the Octopus Server instance named OctopusServer uses to authenticate itself with its Tentacles:

octopus.server export-certificate --instance="OctopusServer" --export-pfx="C:\temp\OctopusServer-certificate.pfx" --pfx-password="your-secret-password"

Exporting gRPC certificate

This example exports the certificate that the Octopus Server instance named OctopusServer uses to authenticate itself with its Kubernetes Monitors and Argo CD Gateways:

octopus.server export-certificate --instance="OctopusServer" --export-pfx="C:\temp\OctopusServer-certificate.pfx" --pfx-password="your-secret-password" --type="grpc"

Help us continuously improve

Please let us know if you have any feedback about this page.

Send feedback

Page updated on Wednesday, November 19, 2025