Hi, I got the same issue yesterday when I was trying to migrate a VM. The migration failed
because of the expired certificate. As I cannot migrate and VMs must be running I could
not put the hypervisor in maintenance mode and do an "Enroll Certificate".
Instead I found a manual way to renew the certificates and has now created an ansible
role/playbook for it that will renew certificates and restart service vdsmd and libvirtd.
Let me know if you would like to get a copy of the ansible role.