On Thu, Jan 18, 2018 at 3:38 PM, Sandro Bonazzola <sbonazzo(a)redhat.com&gt; wrote: ​Yes, this is tracked under https://bugzilla.redhat.com/show_bug.cgi?id=1380498 ​ ​AFAIK upgrade part of host-deploy in 4.1 and below just upgraded specific packages, nothing else. PKI stuff is handled by installation part of host-deploy, which can be execute by clicking Reinstall on existing hosts. There was/is a slight confusion between these 2 parts​: 1. Upgrade - always perform only upgrade of packages: in 4.1 and below only specific ones, in 4.2+ all packages with ability to reboot a host after upgrade 2. Reinstall - it perform exactly the same steps as Installation: performing configuration, install/updating required packages, enrolling certiifcation, executing setup networks ... Martin -- Martin Perina Associate Manager, Software Engineering Red Hat Czech s.r.o.