I According https://access.redhat.com/solutions/3532921 the recommended way to regenerate the hosts' certificates is to set the host into maintenance from the UI and then either via the 'Enroll Certificate' (from the Hosts page) or remove & add the host.

Also, you can login on a Hypervisor (Host) and use 'hosted-engine --set-maintenance --mode=global' to set the Global HA. To verify: 'hosted-engine --vm-status'. This will allow you to run the engine-setup (run it from tmux or screen session).

On Tue, Jan 11, 2022 at 17:54, dhanaraj.ramesh--- via Users
<users@ovirt.org> wrote:

even we brought up the self hosted engine in one of the host but when we try to renew the expired ssl using engine-setup option, it is throwing same error.

we did put the system to global maintenance mode from one of the host

Stage: Setup validation
During execution engine service will be stopped (OK, Cancel) [OK]:
[ ERROR ] It seems that you are running your engine inside of the hosted-engine VM and are
not in "Global Maintenance" mode.
In that case you should put the system into the "Global Maintenance"
mode before running engine-setup, or the hosted-engine HA agent might kill the machine,
which might corrupt your data.
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/T5ZWF2BTXSN2X7WMYCJCFDQQIVLX3SZF/