As a part of Welcome page we have a link 'CA certificate' which can be used to download and import engine CA certificate on clients, which needs to be done to have a verified connection for RHV Manager. By default engine HTTPS certificate is signed by engine CA. But we have a procedure to replace engine HTTPS certificate by custom HTTPS certificate signed by custom CA: https://access.redhat.com/documentation/en-us/red_hat_virtualization/4.4/html/administration_guide/appe-red_hat_enterprise_virtualization_and_ssl#Replacing_the_Manager_CA_Certificate After switching to custom HTTPS certificate 'CA certificate' link cannot be used any longer to import certificate to clients, because it return engine CA and not the custom CA. So customers need to use their own CA certificate distribution to make that certificate available on clients. There is a confusion about it currently (BZ1928158), so we should add a note about it into 'Replacing the Manager CA Certificate' chapter
When you do that, please also explain that when integrating with other products such as Red Hat Sattelite, one needs to manually import the correct certificate into Satellite. Satellite will by default get the CA from the URL of the PKI Servlet, ca-certificate resource, so the internal CA will be provided and it wont work and it needs to be done manually.
(In reply to Germano Veit Michel from comment #2) > When you do that, please also explain that when integrating with other > products such as Red Hat Sattelite, one needs to manually import the correct > certificate into Satellite. > > Satellite will by default get the CA from the URL of the PKI Servlet, > ca-certificate resource, so the internal CA will be provided and it wont > work and it needs to be done manually. Note, that Satellite has deprecated RHV support in current version [1] and the option will be removed soon. But good point to have it documented. [1]: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.12/html/release_notes/assembly_introducing-red-hat-satellite_sat6-release-notes#ref_deprecated-functionality_assembly_introducing-red-hat-satellite
PR was merged