Proxmox Notes on SSL, Migration, and miscellaneous topics

proxmox_notes.as

## INSTALL VALID SSL

(Helps fix VNC error with SSL) Err: Failed to start VNC server: Our own certificate /etc/pve/local/pve-ssl.pem failed validation against /etc/pve/pve-root-ca.pem: The certificate hasn't got a known issuer

# Must rm/mv existing SSL
/etc/pve/pve-root-ca.pem
/etc/pve/priv/pve-root-ca.key
/etc/pve/nodes/<node>/pve-ssl.pem
/etc/pve/nodes/<node>/pve-ssl.key 

# CP valid SSL
fullchain.pem /etc/pve/nodes/<node>/pveproxy-ssl.pem
private-key.pem /etc/pve/nodes/<node>/pveproxy-ssl.key

# At the end
pvecm updatecerts -f
systemctl restart pveproxy in all nodes


## Revert to default SSL Configuration
rm -rf /etc/pve/pve-root-ca.pem
rm -rf /etc/pve/priv/pve-root-ca.key
rm -rf /etc/pve/nodes/pve01/pve-ssl.pem
rm -rf /etc/pve/nodes/pve01/pve-ssl.key
rm /etc/pve/pve-root-ca.pem /etc/pve/priv/pve-root-ca.key

pvecm updatecerts -f
systemctl restart pveproxy

## Official Docs on HTTPS Certs Config
https://pve.proxmox.com/wiki/HTTPS_Certificate_Configuration_(Version_4.x,_5.0_and_5.1)



# Manual on qm
https://pve.proxmox.com/pve-docs/qm.1.html

# IMPORT OVA
https://forum.proxmox.com/threads/procedure-to-import-vmware-ova-to-proxmox-5-0-23-with-zfs-vm-store.36779/

# Migration of Server
https://pve.proxmox.com/wiki/Migration_of_servers_to_Proxmox_VE