Skip to main content
Prints the TLS certificate or rotates the password/certificate of a database. In both subcommands, the database ID is optional: the CLI resolves it from the argument, then falls back to an interactive picker. 
squarecloud db credentials certificate
# Uses an interactive picker to choose the database, then prints its TLS certificate.

squarecloud db credentials certificate <dbID>
# Prints the TLS certificate of a specific database.

squarecloud db credentials reset password <dbID>
# Rotates the database password and prints the new one.

squarecloud db credentials reset certificate <dbID>
# Rotates the TLS certificate.
The reset subcommand is destructive: rotating a password or certificate immediately invalidates the old one for any connection still using it. It asks for y/N confirmation before proceeding; pass -y/--yes to skip the prompt. 
squarecloud db credentials reset password <dbID> -y
# Rotates the password without asking for confirmation.
Use squarecloud db credentials --help for more information about this command.