Hello We are receiving the following notifications from our ovirt manager : Message:Engine's certification is about to expire at 2022-05-03. Please renew the engine's certification. Severity:WARNING Effectively : # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -startdate -enddate -noout notBefore=Mar 30 04:48:15 2021 GMT notAfter=May 3 04:48:15 2022 GMT However I can not find any documentation on how to renew this certificate. The following doc only convers changing apache-ca.pem & apache.cer, and not engine.cer Doc oVirt : https://ovirt.org/documentation/administration_guide/index.html#Replacing... Doc RHV : https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/... Any help ?

Thank you Didi, I can confirm that engine-setup detected the approaching expiration of the engine certificate and proposed to renew it. We'll try proposing a documentation fix Guillaume Pavese Ingénieur Système et Réseau Interactiv-Group On Mon, Apr 25, 2022 at 9:02 PM Yedidyah Bar David <didi(a)redhat.com&gt; wrote: > On Mon, Apr 25, 2022 at 2:45 PM Guillaume Pavese > <guillaume.pavese(a)interactiv-group.com&gt; wrote: > > > > Hello > > > > We are receiving the following notifications from our ovirt manager : > > > > Message:Engine's certification is about to expire at 2022-05-03. Please > renew the engine's certification. > > Severity:WARNING > > > > > > Effectively : > > > > # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -startdate > -enddate -noout > > notBefore=Mar 30 04:48:15 2021 GMT > > notAfter=May 3 04:48:15 2022 GMT > > > > > > However I can not find any documentation on how to renew this > certificate. > > The following doc only convers changing apache-ca.pem & apache.cer, and > not engine.cer > > > > Doc oVirt : > https://ovirt.org/documentation/administration_guide/index.html#Replacing... > > Doc RHV : > https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/... > > > > > > Any help ? > > Please try running 'engine-setup'. If you want to prevent it from > upgrading the engine, you can try 'engine-setup --offline'. > > You might want to create a github issue about the documentation > missing this information. If you do, please clarify where you expected > it to appear and what you searched for when looking for it. > Alternatively, patches are welcome :-), the oVirt documentation is > managed in a github repo, with a link in each page "Edit this page". > > Good luck and best regards, > -- > Didi > > Ce message et toutes les pièces jointes (ci-après le “message”) sont établis à l’intention exclusive de ses destinataires et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d’en avertir immédiatement l’expéditeur. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L’internet ne permettant pas d’assurer l’intégrité de ce message . Interactiv-group (et ses filiales) décline(nt) toute responsabilité au titre de ce message, dans l’hypothèse ou il aurait été modifié. IT, ES, UK. <https://interactiv-group.com/disclaimer.html> _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/BN23FQXEWIM...

Hi Guillaume, to renew host certificates you need to perform following actions in webadmin or RESTAPI: 1. Move the host to Maintenance status 2. Execute Enroll Certificates for the host 3. Watch Events on the host to see if Enroll Certificates finished successfully 4. Execute Activate for the host Regards, Martin On Mon, Apr 25, 2022 at 1:46 PM Guillaume Pavese <guillaume.pavese(a)interactiv-group.com&gt; wrote: Hello We are receiving the following notifications from our ovirt manager  : Message:Engine's certification is about to expire at 2022-05-03. Please renew the engine's certification. Severity:WARNING Effectively : # openssl x509 -in /etc/pki/ovirt-engine/certs/engine.cer -startdate -enddate -noout notBefore=Mar 30 04:48:15 2021 GMT notAfter=May  3 04:48:15 2022 GMT However I can not find any documentation on how to renew this certificate. The following doc only convers changing apache-ca.pem & apache.cer, and not engine.cer Doc oVirt : https://ovirt.org/documentation/administration_guide/index.html#Replacing... Doc RHV : https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/... Any help ? Guillaume Pavese IngénieurSystèmeet Réseau Interactiv-Group Ce message et toutes les pièces jointes (ci-après le “message”) sont établis à l’intention exclusive de ses destinataires et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d’en avertir immédiatement l’expéditeur. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L’internet ne permettant pas d’assurer l’intégrité de ce message . Interactiv-group (et ses filiales) décline(nt) toute responsabilité au titre de ce message, dans l’hypothèse ou il aurait été modifié. IT, ES, UK. <https://interactiv-group.com/disclaimer.html> _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/HWHBRHZDCHK... -- Martin Perina Manager, Software Engineering Red Hat Czech s.r.o. _______________________________________________ Users mailing list --users(a)ovirt.org To unsubscribe send an email tousers-leave(a)ovirt.org Privacy Statement:https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct:https://www.ovirt.org/community/about/community-guidelines/ List Archives:https://lists.ovirt.org/archives/list/users@ovirt.org/message/RO...