KB Article #179587

Regenerate default domain certificate with several admin node manager

Problem

-- How to regenerate domain certificate, using the default certificate, when there are several admin node manager on the domain?

-- By using the command:

managedomain --regen_certs

on all the nodes, there are some communications issue after admin node manager are restarted

Resolution

- The communication issues between the admin node manager after having regenerate the certificates on the domain using:

managedomain --regen_certs

happens because each admin node manager will recreate it's own root certificate, so user certificates used by admin node manager and instance on each nodes are not signed by the same root certificate and authentication between nodes fails.

- To not have this issue, you can, in a first time regenerate the certificates on the first admin node manager using:

managedomain --regen_certs

- then, on the other admin node manager, retrieve the domain.p12 file from the first admin node manager (which is under {apigateway_home}/groups/certs/private/) and regenerate the certificates using:

managedomain --regen_certs --sign_with_user_provided --ca=domain.p12