Renew a certificate and run the cycle

TLSPilot renews a certificate at its planned time and deploys it on the next cycle, see chapter Keep it renewing. To force a renewal now, run:

Invoke-TLSPilotCertificateRenew -Id $id -Force

To install the certificate that TLSPilot already holds on its targets again without issuing a new one, run:

Start-TLSPilotDeployment -CertificateId $id

To check the result, read the deployment history:

Get-TLSPilotDeploymentHistory -CertificateId $id `
    -DeploymentId $dep.id

Start-TLSPilotCycle runs the whole cycle immediately and does the same work as the daily check. With -Wait, the command only returns once the cycle has finished:

Start-TLSPilotCycle -Wait -TimeoutSeconds 600

To renew and deploy at once when the CA pulls the window forward, switch on Renew immediately on CA emergency for the whole management host, see chapter ARI – ACME Renewal Information:

Set-TLSPilotAcmeEmergency -Enabled $true