Recently our manually generated UCS certificate expired. Checking the manual (here) we needed to regenerate it with the following procedure:
UCS-A# scope security
UCS-A /security # scope keyring default
UCS-A /security/keyring* # set regenerate yes
UCS-A /security/keyring* # commit-buffer
UCS-A /security/keyring #
Piece of cake.
What isn’t said is that this will boot everyone using UCS Manager out of it and they have to reconnect. Might be useful to know in the future for scheduling purposes 😉