[ovirt-users] Re: How to re-enroll (or renew) host certificates for a single-host hosted-engine deployment?

On Sun, Dec 6, 2020 at 7:49 PM Derek Atkins <derek@ihtfp.com> wrote:

Hi Didi,

One more question:

Can you verify that etc/pki/libvirt/clientcert.pem, etc/pki/vdsm/certs/vdsmcert.pem, and etc/pki/vdsm/libvirt-spice/server-cert.pem are all supposed to be same certificate (on the host)? By a quick find | grep all three of these files appear to be the <Host>.cer certificate file?

Yes, and also vdsm/libvirt-vnc/server-cert.pem . -- Didi