[SOLVED] Unexpected change of fingerprint

[Maksimus]

On one of the PVS servers in the morning, a problem was discovered that the fingerprint had changed and because of this, the backup disks were not available from the PVE cluster. Tell me where to look in order to understand the reason for changing the fimherprit and in general under what conditions it can change on a working server.

The problem of inaccessibility of disks was discovered on Monday, on Friday evening everything worked, backups passed, but the morning ones at 6 in the morning did not pass anymore because the server's fingerprint changed

Of the possible problems, the dns record on Friday of this server was accidentally deleted, but then it was restored and everything worked fine

 

[B.Otto]

Do you backup to a Proxmox Backup Server instance and did you change (renew) the SSL certificates of the PBS? That does change the fingeprint.

Adding a PBS via fingerprint is only needed if you use a self-signed certificate. If instead you use a verifyable certificate and the server FQDN is resolvable via DNS, then you can omit the fingerprint, since then the PVE can verify that the PBS is the right one via the normal means.

 

[Maksimus]

Yes, you are right, the certificate changed on Saturday night, removed the fingerprint check in the north, everything is working fine.