Renew expired UMB certificates
How to renew the certificates used to authenticate against shared services, such as UMB.
Problem
There are 2 service accounts used to access UMB:
-
cki-amqp-bridge: Read only permission. -
cki-umb-messenger: Write permission on the following topics:VirtualTopic.eng.cki.ready_for_testVirtualTopic.eng.ci.cki.#
These service accounts use certificates to authenticate.
Steps
- The certificates are automatically renewed every year via the Dogtag certificate manager. No manual steps are necessary!
Useful Links
- Accessing Shared Services
- UMB Getting Started
- How to: Request UMB Certificates
- INC1643166: Service Account creation ticket.
- RITM0854859: UMB authorization ticket.