Renew expired UMB certificates

How to renew the certificates used to authenticate against shared services, such as UMB.


There are 2 service accounts used to access UMB:

  1. cki-amqp-bridge: Read only permission.

  2. cki-umb-messenger: Write permission on the following topics:

    • VirtualTopic.eng.cki.ready_for_test

These service accounts use certificates to authenticate.


  1. The certificates are automatically renewed every year via the Dogtag certificate manager. No manual steps are necessary!
Last modified October 7, 2022: Document artifact storage (b3c3b24)