Due to a domain name change at a customer site, a Cisco UCS cluster must be renamed. An engineer must recommend a solution to ensure that the Cisco UCS Manager is available over HTTPS. Which action…

Question

Options

• AReinstall the cluster to generate the default key ring certificate
• BGenerate a new default key ring certificate from the Cisco UCS Manager
• CReboot the SSO component of the Cisco UCS Manager
• DRegenerate the default key ring certificate manually

• A
  8% (4)
• B
  4% (2)
• C
  14% (7)
• D
  73% (36)

Explanation

The default key ring certificate in Cisco UCS Manager is self-signed and tied to the cluster's hostname/domain name embedded in the certificate's Common Name (CN) or Subject Alternative Name (SAN). When the cluster is renamed, the existing certificate's CN no longer matches the new FQDN, causing HTTPS certificate validation failures. The correct remediation is to manually regenerate (recreate) the default key ring certificate so it is issued under the new domain name. Reinstalling the cluster is disruptive and unnecessary. Simply rebooting the SSO component does not regenerate the certificate. Generating a new default key ring is the precise, non-disruptive fix.

No community discussion yet for this question.