Company security policies might require replacing default KVM on RHEL 9.6 SSL certificates with a third-party CA-signed certificate on each KVM on RHEL 9.6 host.
Self-signed certificates can be replaced on KVM on RHEL 9.6 with certificates from a trusted CA, either a commercial Certificate Authority (CA) or an organizational CA, when company policy requires it.
Note:
This activity can be conducted 100% remotely and it is NOT a service affecting procedure for the virtual machines running on the KVM on RHEL 9.6 host. Nonetheless Avaya strongly recommends conducting this activity in a customer approved maintenance window during off business hours when possible or low traffic hours.
Note:
To eliminate misconfigurations and avoid errors during the implementation of customs certificates, Avaya strongly recommends conducting this activity with one server at a time, when having multiple ASP 130 compute servers. Hence, do not attempt to replace SSL certificates and Keys on multiple servers at the same time.
Note:
This procedure consists of multiple sub-sections and steps that must be followed and completed in the order documented to ensure the successful implementation of custom certificates in KVM on RHEL 9.6.
Warning:
Avoid any administrative tasks such as making configuration changes to the host when conducting this procedure.
