Cannot update custom certificate

kernelcrunch

New Member
Jun 28, 2025
1
0
1
I have had no problem adding a custom certificate to a node. However, I have been unable to change to a different certificate. After running the following commands, the pveproxy-ssl.pem is successfuly changed to the new cert, but the pve-ssl.pem changes back to the first custom certificate when I run 'pvecm updatecerts -F' (i.e. pve-ssl.pem domain does not match pve-proxy-ssl.pem domain)

Code:
sudo cp /root/customcert2.pem /etc/pve/local/pveproxy-ssl.pem
sudo cp /root/customcert2.key /etc/pve/local/pveproxy-ssl.key
sudo pvecm updatecerts -F && sudo systemctl restart pvedaemon pveproxy

I have six nodes. Nodes 3-6 were built with 'customcert2', so they are working great. (i.e. pve-ssl.pem domain matches pve-proxy-ssl.pem domain and I can load SPICE Shells just fine).

Nodes 1-3 were originally built with 'customcert1'. So, I'm trying to swap the custom cert. Essentially, how can I modify the certificate used by the command 'pvecm updatecerts -F' and 'pve-ssl.pem'?

Thank you!