# Updating SAML certificates from VMware Cloud Director

**URL:** <https://forum.keycloak.org/t/updating-saml-certificates-from-vmware-cloud-director/24802>\
**Category:** Configuring the server\
**Tags:** saml\
**Created:** [February 29, 2024, 8:50am UTC](https://forum.keycloak.org/t/updating-saml-certificates-from-vmware-cloud-director/24802 "2024-02-29T08:50:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![siggysignin](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@siggysignin](https://forum.keycloak.org/u/siggysignin)\
**Post date:** [February 29, 2024, 8:50am UTC](https://forum.keycloak.org/t/updating-saml-certificates-from-vmware-cloud-director/24802/1 "2024-02-29T08:50:51Z")

</div>

Hi

My SAML certificates in a Cloud Director tenant expired and I’ve regenerated a new pair but I can’t find a way to update them at the Keycloak realm gracefully. I guess I cloud try to remove the existing SAML connection and just create a new one but that seems less than ideal.

Is there a documented process for such a case?

Keycloak Server v. 20.0.1, Cloud Director 10.4.2

KR, Siggy

---

<div class="post-metadata">

**Author:** ![siggysignin](https://avatars.discourse-cdn.com/v4/letter/s/94ad74/32.png) [@siggysignin](https://forum.keycloak.org/u/siggysignin)\
**Post date:** [November 26, 2024, 12:49pm UTC](https://forum.keycloak.org/t/updating-saml-certificates-from-vmware-cloud-director/24802/2 "2024-11-26T12:49:11Z")

</div>

Yup, seems that removing the old ClientID/SAML configuration in Kc was at least a working option. Just import the updated service provider metadata file as a new client and you should be good to go. Make sure to carry over any customizations in the client config.