Werk #18988: Automatic certificate rotation for "Authority Key Identifier" compliance
| Component | Core & setup | ||
| Title | Automatic certificate rotation for "Authority Key Identifier" compliance | ||
| Date | Dec 17, 2025 | ||
| Level | Trivial Change | ||
| Class | New Feature | ||
| Compatibility | Compatible - no manual interaction needed | ||
| Checkmk versions & editions |
|
With the release of Checkmk 2.5, we have introduced an automatic update that seamlessly rotates the site certificate.
The update action checks whether the existing site certificate has the "Authority Key Identifier" property (that was introduced with Werk 18990). If the property is missing, the script automatically rotates (regenerates) the certificate. This ensures that, after the update, all certificates are compliant with the new standard.
No user action is required during the update process. If a certificate already has the AKI property, no changes are made.
Additionally, the underlying certificate creation libraries have been updated. Any certificate manually created or rotated in the future (e.g., via the cmk-cert tool) will include the Authority Key Identifier by default.