diff --git a/lib/krb5/krb5_get_credentials.3 b/lib/krb5/krb5_get_credentials.3
index 4d2f77d6b..67a89dd2c 100644
--- a/lib/krb5/krb5_get_credentials.3
+++ b/lib/krb5/krb5_get_credentials.3
@@ -39,7 +39,8 @@
 .Nm krb5_get_credentials_with_flags ,
 .Nm krb5_get_cred_from_kdc ,
 .Nm krb5_get_cred_from_kdc_opt ,
-.Nm krb5_get_kdc_cred
+.Nm krb5_get_kdc_cred ,
+.Nm krb5_get_renewed_creds
 .Nd get credentials from the KDC using krbtgt
 .Sh LIBRARY
 Kerberos 5 Library (libkrb5, -lkrb5)
@@ -89,6 +90,14 @@ Kerberos 5 Library (libkrb5, -lkrb5)
 .Fa "krb5_creds *in_creds"
 .Fa "krb5_creds **out_creds"
 .Fc
+.Ft krb5_error_code
+.Fo krb5_get_renewed_creds
+.Fa "krb5_context context"
+.Fa "krb5_creds *creds"
+.Fa "krb5_const_principal client"
+.Fa "krb5_ccache ccache"
+.Fa "const char *in_tkt_service"
+.Fc
 .Sh DESCRIPTION
 .Fn krb5_get_credentials_with_flags
 get credentials specified by
@@ -149,6 +158,20 @@ if the credential exists there first.
 .Fn krb5_get_kdc_cred
 does the same as the functions above, but the caller must fill in all
 the information andits closer to the wire protocol.
+.Pp
+.Fn krb5_get_renewed_creds
+renews a credential given by
+.Fa in_tkt_service
+(if
+.Dv NULL
+the default
+.Li krbtgt )
+using the credential cache
+.Fa ccache .
+The result is stored in
+.Fa creds
+and should be freed using
+.Fa krb5_free_creds .
 .Sh EXAMPLES
 Here is a example function that get a credential from a credential cache
 .Fa id