How to Renew a Self-Signed SSL Certificate for RMT Master

After one year of use, the RMT Master certificate expires, causing the certificate to be invalid for the Master URL. Follow these step-by-step instructions to create a new self-signed certificate:

Renewing Default Certificate:

1. Delete the existing default certificate file (default.pfx) from the configuration folder in the RMT Master folder. The default path for the configuration folder is:  C:\Program Files\Tableau\Tableau Resource Monitoring Tool\master\config.

2. Execute the below command under the master folder's executable.  The default path for the master folder is: C:\Program Files\Tableau\Tableau Resource Monitoring Tool\master.

Ensure it is run as an Administrator on Windows. This command invalidates the previously generated agent bootstrap files.

tabrmt-master.exe installDefaultCertificates

3. Run the below command to restart the RMT  master

rmtadmin restart

Note: RMT generates two distinct certificates during installation - one for securing communication with the RMT Server website and agents, and another for securing communication with RabbitMQ. Following the preceding steps, it's crucial to proceed with certificate rotation.

Rotating Certificates:

1. Run the below command on the RMT Master Server to generate a new RabbitMQ self-signed certificate.

rmtadmin rotate-mq-certificates

2. Execute below on the agents to communicate the certificate change. This step is crucial and requires bootstrap files, similar to the initial agent registration.

rmtadmin rotate-mq-certificate ( requires passing RMT Master credential with bootstrap)