Expiration
The MCS CA and MCS certificate are valid for 10 years and are automatically rotated by the MCO at 8 years.
The issued serving certificates are valid for 10 years.
|
|
This automatic certificate rotation applies only to clusters that use machine sets. For clusters that do not use machine sets, such as vSphere user-provisioned infrastructure clusters, you are required to manually rotate these certificates. For more information on manual certificate rotation, see the Red Hat Knowledgebase article Regenerating CA certificates for the Machine Config Server. |