KB Article #179587
Regenerate default domain certificate with several admin node manager
Problem
-- How to regenerate domain certificate, using the default certificate, when there are several admin node manager on the domain?
-- By using the command:
managedomain --regen_certs
on all the nodes, there are some communications issue after admin node manager are restarted
Resolution
- The communication issues between the admin node manager after having regenerate the certificates on the domain using:
managedomain --regen_certs
happens because each admin node manager will recreate it's own root certificate, so user certificates used by admin node manager and instance on each nodes are not signed by the same root certificate and authentication between nodes fails.
- To not have this issue, you can, in a first time regenerate the certificates on the first admin node manager using:
managedomain --regen_certs
- then, on the other admin node manager, retrieve the domain.p12 file from the first admin node manager (which is under {apigateway_home}/groups/certs/private/) and regenerate the certificates using:
managedomain --regen_certs --sign_with_user_provided --ca=domain.p12