Renewing Management Center's Self-Signed Certificate

Last update:
Last verified version: MC 3.2.1

Issue

Management Center ships with a self-signed certificate for its web interface that expires after 182 days.

If you do not use your own CA infrastructure and want to renew the certificate or want to revert from a broken state, you can recreate a self-signed certificate.

If you need to regenerate Server Certificate Agent Communication, please refer to this article: Fixing FQDN Issues for Management Center Installation and Connectivity

Please refer to this article, how to sign the generated CSR via an internal CA:
Creating a CSR in Management Center and Signing with CA

Solution

SSH root access to Management Center is required for this solution.

To do so log in using SSH and execute:

Bash
sudo openssl req -new -newkey rsa:4096 -days 182 -nodes -x509 -subj "/O=Nextron Systems GmbH/CN=$(hostname --fqdn)" -keyout /etc/asgard-management-center/server.key -out /etc/asgard-management-center/server.pem

You need to restart Management Center in order for the changes to take effect.

Bash
sudo systemctl restart asgard-management-center