---
title: Changing the deployed policy mode
description: You can change the type of policy deployed from flow hook to flow callout, or flow callout to flow hook using the PingIntelligence policy tool.
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_integrations:pingintelligence_apigee_change_policy_mode
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_integrations/pingintelligence_apigee_change_policy_mode.html
revdate: April 3, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
  choose-from: Choose from:
  next-steps: Next steps
---

# Changing the deployed policy mode

You can change the type of policy deployed from flow hook to flow callout, or flow callout to flow hook using the PingIntelligence policy tool.

## About this task

|   |                                                                                                                                                                                                                                                                                    |
| - | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
|   | Using the following steps, you can also change the use of security certificate from self-signed to certificate authority (CA) *(tooltip: \<div class="paragraph">&#xA;\<p>An entity that issues digital certificates.\</p>&#xA;\</div>)*-signed, or from CA-signed to self-signed. |

To change the type of policy:

## Steps

1. To undeploy the deployed policy, run one of the following commands based on the policy and certificate used:

   ### Choose from:

   * Undeploy a Flow Hook policy using a self-signed certificate.

     ```
     /opt/pingidentity/pi/apigee/bin/undeploy.sh -fh
     Checking Apigee connectivity
     Apigee connectivity ... success

     Undeploying PI Apigee policy Flow Hook

     1) Preproxy hook status ... undeployed
     2) Postproxy hook status ... undeployed
     3) Request policy undeployment status ... undeployed
     4) Response policy undeployment status ... undeployed
     5) Request policy deleting status ... deleted
     6) Response policy deleting status ... deleted
     7) PingIntelligence-Encrypted-Config-KVM status ... not-applicable
     8) PingIntelligence-Config-KVM status ... not-applicable
     9) ASE Primary target server status ... undeployed
     10) ASE Secondary target server status ... undeployed
     11) Truststore status ... undeployed
     12) Cache status ... undeployed

     Undeployment of PI Policy finished successfully
     ```

   * Undeploy a Flow Hook policy using a CA-signed certificate.

     ```
     opt/pingidentity/pi/apigee/bin/deploy.sh -fh -ca

     Checking Apigee connectivity
     Apigee connectivity ... success

     Undeploying PI Apigee policy Flow Hook

     1) Preproxy hook status ... undeployed
     2) Postproxy hook status ... undeployed
     3) Request policy undeployment status ... undeployed
     4) Response policy undeployment status ... undeployed
     5) Request policy deleting status ... deleted
     6) Response policy deleting status ... deleted
     7) PingIntelligence-Encrypted-Config-KVM status ... not-applicable
     8) PingIntelligence-Config-KVM status ... not-applicable
     9) ASE Primary target server status ... undeployed
     10) ASE Secondary target server status ... undeployed
     11) Truststore status ... not-applicable - running using CA signed certificate
     12) Cache status ... undeployed

     Undeployment of PI Policy finished successfully
     ```

   * Undeploy a Flow Callout policy using a self-signed certificate.

     ```
     /opt/pingidentity/pi/apigee/bin/undeploy.sh -fc
     Checking Apigee connectivity
     Apigee connectivity ... success

     Undeploying PI Apigee policy Flow Call Out

     1) Preproxy hook status ... undeployed
     2) Postproxy hook status ... undeployed
     3) Request policy undeployment status ... undeployed
     4) Response policy undeployment status ... undeployed
     5) Request policy deleting status ... deleted
     6) Response policy deleting status ... deleted
     7) PingIntelligence-Encrypted-Config-KVM status ... not-applicable
     8) PingIntelligence-Config-KVM status ... not-applicable
     9) ASE Primary target server status ... undeployed
     10) ASE Secondary target server status ... undeployed
     11) Truststore status ... undeployed
     12) Cache status ... undeployed

     Undeployment of PI Policy finished successfully
     ```

   * Undeploy a Flow Callout policy using a CA-signed certificate.

     ```
     opt/pingidentity/pi/apigee/bin/deploy.sh -fc -ca

     Checking Apigee connectivity
     Apigee connectivity ... success

     Undeploying PI Apigee policy Flow Call Out

     1) Preproxy hook status ... undeployed
     2) Postproxy hook status ... undeployed
     3) Request policy undeployment status ... undeployed
     4) Response policy undeployment status ... undeployed
     5) Request policy deleting status ... deleted
     6) Response policy deleting status ... deleted
     7) PingIntelligence-Encrypted-Config-KVM status ... not-applicable
     8) PingIntelligence-Config-KVM status ... not-applicable
     9) ASE Primary target server status ... undeployed
     10) ASE Secondary target server status ... undeployed
     11) Truststore status ... not-applicable - running using CA signed certificate
     12) Cache status ... undeployed

     Undeployment of PI Policy finished successfully
     ```

## Next steps

To deploy the other policy, see [Flow Hook](pingintelligence_apigee_deploy_flow_hook.html) or [Flow Call Out](pingintelligence_apigee_deploy_flow_callout.html).