Hi Andrei, thx a lot for your answer. I tried several time the engine-setup command but it always ends with same above error. DO you have the email of Jose? A colleague renewed the cert manually on the engine whith these commands: # SUBJECT="$(openssl x509 -subject -noout -in /etc/pki/ovirt-engine/certs/apache.cer.20220829164912 | sed 's/subject= //')" # /usr/share/ovirt-engine/bin/pki-enroll-pkcs12.sh --name=apache --password="@PASSWORD@" --subject=/C=US/O=<domain_suffix>/CN=<engine fqdn> # openssl pkcs12 -passin "pass:@PASSWORD@" -nokeys -in /etc/pki/ovirt-engine/keys/apache.p12 > /etc/pki/ovirt-engine/certs/apache.cer # openssl pkcs12 -passin "pass:@PASSWORD@" -nocerts -nodes -in /etc/pki/ovirt-engine/keys/apache.p12 > /etc/pki/ovirt-engine/keys/apache.key.nopass # chmod 0600 /etc/pki/ovirt-engine/keys/apache.key.nopass # systemctl restart httpd.service ovirt-engine.service but now, our 2 hosts are unresponsive... Thx