I seen the hosted engine ssl expired hence unbale to connect with all the hosts. openssl x509 -noout -enddate -in /etc/pki/ovirt-engine/certs/engine.cer notAfter=Dec 22 15:08:50 2021 G VDSM cal2-app3-nodeb.wac..net command Get Host Capabilities failed: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed The original setup was done with self hosted engine but since had a issues I provisioned new standalone HE and restored the backup from original setup. now the problem is when i try to renew the hosted engine ssl with engine-setup option it is throwing error stating hosted engine vm not set with Global maintenance mode as below Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: [ ERROR ] It seems that you are running your engine inside of the hosted-engine VM and are not in "Global Maintenance" mode. In that case you should put the system into the "Global Maintenance" mode before running engine-setup, or the hosted-engine HA agent might kill the machine, which might corrupt your data. [ ERROR ] Failed to execute stage 'Setup validation': Hosted Engine setup detected, but Global Maintenance is not set. [ INFO ] Stage: Clean up Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20220111013444-ojwb6y.log [ INFO ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20220111013625-setup.conf' [ INFO ] Stage: Pre-termination [ INFO ] Stage: Termination [ ERROR ] Execution of setup failed Is there any way I can overcome this issue.. how do I skip this global maintenance mode validation as im running the new HS in standalone mode?

According to https://access.redhat.com/solutions/3028811 after v 3.5.4 the engine-setup can update the certificates on the engine. Once you got them renewed and if the hosts' certificates haven't expired -> communication should be recovered . I According https://access.redhat.com/solutions/3532921 the recommended way to regenerate the hosts' certificates is to set the host into maintenance from the UI and then either via the 'Enroll Certificate' (from the Hosts page) or remove & add the host. Can you provide a short summary like version of engine & hosts? Also, you can login on a Hypervisor (Host) and use 'hosted-engine --set-maintenance --mode=global' to set the Global HA. To verify: 'hosted-engine --vm-status'. This will allow you to run the engine-setup (run it from tmux or screen session). P.S.:  Those solutions can be accessed via developer subscription (in case you don't have a RH one). Just check developers.redhat.com. Best Regards,Strahil Nikolov On Tue, Jan 11, 2022 at 17:54, dhanaraj.ramesh--- via Users<users(a)ovirt.org> wrote: even we brought up the self hosted engine in one of the host but when we try to renew the expired ssl using engine-setup option, it is throwing same error. we did put the system to global maintenance mode from one of the host Stage: Setup validation During execution engine service will be stopped (OK, Cancel) [OK]: [ ERROR ] It seems that you are running your engine inside of the hosted-engine VM and are not in "Global Maintenance" mode. In that case you should put the system into the "Global Maintenance" mode before running engine-setup, or the hosted-engine HA agent might kill the machine, which might corrupt your data. _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/T5ZWF2BTXSN...

Have you executed 'hosted-engine --set-maintenance --mode=global'  on a host that us supposed to run the HostedEngine VM ? Best Regards,Strahil Nikolov On Wed, Jan 12, 2022 at 8:26, Gangireddy Munakkayala via Users<users(a)ovirt.org> wrote: Hi Strahil Nikolov, I am from Ramesh team. Kindly find below the manage engine & hosts version. oVirt Open Virtualization Manager : 4.4.3.12-1.el8 Host: OS Version: RHEL - 8 - 2.2004.0.2.el8 OS Description:oVirt Node 4.4.3 _______________________________________________ Users mailing list -- users(a)ovirt.org To unsubscribe send an email to users-leave(a)ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/XAVSXSZJLCL...