# open balena api doesn't seems to recover cert modification

**URL:** <https://forums.balena.io/t/open-balena-api-doesnt-seems-to-recover-cert-modification/349574>\
**Category:** openBalena\
**Created:** [October 5, 2021, 1:27pm UTC](https://forums.balena.io/t/open-balena-api-doesnt-seems-to-recover-cert-modification/349574 "2021-10-05T13:27:32Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![matteopeluso](https://avatars.discourse-cdn.com/v4/letter/m/ebca7d/32.png) [@matteopeluso](https://forums.balena.io/u/matteopeluso)\
**Post date:** [October 7, 2021, 2:44pm UTC](https://forums.balena.io/t/open-balena-api-doesnt-seems-to-recover-cert-modification/349574/6 "2021-10-07T14:44:34Z")

</div>

> [@dfunckt](#):
>
> DEVICE\_CONFIG\_OPENVPN\_CA

I’ve followed the step in this thread ([VPN Certs seems to be expired - #10 by wolf\_karl](https://forums.balena.io/t/vpn-certs-seems-to-be-expired/262191/10)) and manually create certificates for the vpn and root.

There’s nothing in that thread about updating `DEVICE_CONFIG_OPENVPN_CA`…

Just to be sure, I should take the ca.crt in the /open-balena/config/certs/vpn directory and update the `OPENBALENA_VPN_CA_CHAIN` variable in the activate file?

Thanks again

---

_[View the full topic](https://forums.balena.io/t/open-balena-api-doesnt-seems-to-recover-cert-modification/349574)._