Renew expired UMB certificates
How to renew the certificates used to authenticate against shared services, such as UMB.
This page has an internal companion page which might contain additional information.
Problem
There are 2 service accounts used to access UMB:
-
cki-amqp-bridge: Read only permission. -
cki-umb-messenger: Write permission on the following topics:VirtualTopic.eng.cki.ready_for_testVirtualTopic.eng.ci.cki.#
These service accounts use certificates to authenticate.
Steps
- The certificates are automatically renewed every year via the Dogtag certificate manager. No manual steps are necessary!
Useful Links
- Accessing Shared Services
- UMB Getting Started
- How to: Request UMB Certificates
- INC1643166: Service Account creation ticket.
- RITM0854859: UMB authorization ticket.