Renewing ASGARD's Self-Signed Certificate

Last update:
Last verified version: AMC 3.2.1

Issue

ASGARD ships with a self-signed certificate for its web interface that expires after 182 days.

If you do not use your own CA infrastructure and want to renew the certificate or want to revert from a broken state, you can recreate a self-signed certificate.

If you need to regenerate ASGARD Server Certificate Agent Communication, please refer to this article: Fixing FQDN Issues for ASGARD Installation and Connectivity

Please refer to this article, how to sign the ASGARD generated CSR via an internal CA:
Creating a CSR in ASGARD and Signing with CA

Solution

SSH root access to ASGARD is required for this solution.

To do so log in using SSH and execute:

nextron@management-center:~$ sudo openssl req -new -newkey rsa:4096 -days 182 -nodes -x509 -subj "/O=Nextron Systems GmbH/CN=$(hostname --fqdn)" -keyout /etc/asgard-management-center/server.key -out /etc/asgard-management-center/server.pem

You need to restart ASGARD in order for the changes to take effect.

nextron@management-center:~$ sudo systemctl restart asgard-management-center.service