Local certificate expires, unable to renew

[SFA]

Hi.
I know this has been posted already a few times, but I want to be sure of what to do to avoid breaking my cluster of 5 servers.
The case : we have private (ie no internet) proxmox cluster in v8.4.11and the local certificates has expired on all nodes. I tried :

pvecm updatecerts -f

But I get the message :

CA expires in less than 2 weeks, unable to generate certificate.

I am not sure what to delete and/or rename to enable the certificate refresh again.
Could someone make me a summary of what has to be done in that case?

 

[JeanL]

Hi,

You could try this :

to regenerate the self-signed certificate, delete the following files:

/etc/pve/pve-root-ca.pem
/etc/pve/priv/pve-root-ca.key

Afterwards, run the following command to re-generate the certificates and keys:

pvecm updatecerts -f

Source : https://forum.proxmox.com/threads/restore-self-signed-ssl-and-ca-for-node.96800/

Best regards,