| ▲ | junaru 4 days ago | ||||||||||||||||
> For this reason, and because even the 2027 changes to 100-day certificates will make manual procedures untenable, we expect rapid adoption of automation long before the 2029 changes. Oh yes, vendors will update their legacy NAS/IPMI/whatever to include certbot. This change will have the exact opposite effect - expired self signed certificates everywhere on the most critical infrastructure. | |||||||||||||||||
| ▲ | xnyanta 3 days ago | parent | next [-] | ||||||||||||||||
I have automated IPMI certificate rotation set-up through Let's Encrypt and ACME via the Redfish API. And this is on 15 year old gear running HP iLO4. There's no excuse for not automating things. | |||||||||||||||||
| ▲ | panki27 4 days ago | parent | prev [-] | ||||||||||||||||
People will just roll out almost forever-lasting certificates through their internal CA for all systems that are not publicly reachable. | |||||||||||||||||
| |||||||||||||||||