< !!! INTERNAL USE ONLY !!! >
Not for distribution directly to end user

Overview

This article will guide the user on how to fix attempting to connect to https://colvm.ccbcmd.edu that results in an unskippable expired certicate error.

Audience

ITS Staff

Procedure

This procedure will not bring down the running VM's or cluster. Note instructions after command.

1. Sign into colvm.ccbcmd.edu via ssh.

2. engine-setup --offline

"engine-setup" will ask a series of questions.

1. Configure firewall?  No (it's already done)

2. Back up database? Yes (just in case)

3. Perform full vacuum for database? Yes (this is just db maintainance. good to do, but if you are in a hurry this can be skipped)

4. Perform full vacuum for OVIRT Engine DB? Yes (same note as above)

5. Renew Certs? Yes (this is what we can for)

6. Setup validation? OK

Management Engine should be accessible. 

OlvmKvmCerts is a script provided by Oracle Support to renew certificates after they've expired.

It's been uploaded to colvm.ccbcmd.edu under /root

 

To renew the host certs:

1. ./OlvmKvmCerts renew-host coln1.ccbcmd.edu

2. Wait until it is complete.

3. ./OlvmKvmCerts renew-host coln2.ccbcmd.edu

There is a "waiting for host to become available" step which takes a while.

 

The document below is a CCBC specific derived from : (access to oracle support required)