My key or certificate is expiring

tovio key status

Shows the attribute certificates you hold, with their issuer, expiry, and whether they are still valid. TOVIO warns before expiry rather than failing silently: tovio status raises a warning at seven days or fewer, and marks the certificate once it has actually lapsed.

Renew

tovio key renew

Takes no arguments. In a Team repository that is its own Key Authority — which is the normal case — it re-issues the expiring certificates you issued with a fresh window.

The limit worth knowing before you need it

Renewing your own certificate against a remote Key Authority is not yet implemented. If your attributes were issued by someone else's authority, key renew is not your path — you need a fresh grant from whoever administers access. Ask with tovio access request, naming the attribute.

What breaks if you ignore it

Reads of the protected paths that depended on those attributes start failing with TVO-KEY-001. Clear files are unaffected and your local work is not lost — your key still exists, only its attestation that you hold a given attribute has lapsed. It looks like losing access and is usually a two-minute fix.

Do not confuse it with missing key material

TVO-KEY-001 is expired. TVO-KEY-002 is absent — no key on this machine at all, typically a locked or cleared keychain, or a fresh clone. Renewing will not fix the second one.

For teams

Certificate expiry arrives for everyone at once if everyone was enrolled on the same day. Check tovio key status across the team before a release rather than during one.