22.1 Renewing Certificates Before Expiration

You can renew both internal and external certificates before expiration.

  1. Log in to the master node.

  2. Change to the following directory:

    cd <k8s_HOME>

    For example:

    cd /opt/arcsight/kubernetes

  3. (Conditional) For internal certificates, run the following command to generate new certificates:

    ./scripts/renewCert --renew -t internal

    In a multi-node deployment, executing the above command automatically distributes the new certificates to all nodes in the cluster.

  4. (Conditional) For external certificates, run the following command to generate new certificates:

    ./scripts/renewCert --renew -t external