Oracle Key Vault (OKV 21.9) Node Certificate Rotation & Expired Certificate Fix in a multitasker

Learn how to safely rotate and renew expired or expiring node/server certificates in an Oracle Key Vault (OKV 21.9) Multi-Master Read-Write environment without service disruption. In this video, we walk through the exact BUI steps required to generate a new node certificate, verify expiration dates, and restore services seamlessly (including Oracle GoldenGate, KMIP, and Cluster services). Summary Checklist / Steps Log into the OKV console (BUI) with a System Admin privileged user. Go to the System Tab and check certificate statuses. Select Node Certificate to inspect expiration impact. Rotate the certificate: Navigate to System → Settings → Service Certificates → Manage Node Certificate → Generate Node Certificate. Verify the updated expiration date in the BUI. Verify services (OGG, KMIP, Cluster services). If services were previously down due to expiration, test node startup or reboot if required.