Uploaded July 2026 | Updated September 2026, 3 weeks ago
Managing TLS certificates in a distributed Ceph cluster can be complex and error-prone, with expired or misconfigured certificates often leading to service disruptions and operational overhead.
This lightning talk introduces the certmgr module in Ceph’s cephadm, which automates the lifecycle of TLS certificates across the cluster. We’ll briefly explore how certmgr handles certificate generation, distribution, and renewal, helping operators maintain secure communication with minimal manual intervention.
Slides: ceph.io/assets/pdfs/events/2026/ceph-days-london/management-in-ceph-with-certmgr.pdf
Managing TLS certificates in a distributed Ceph cluster can be complex and error-prone, with expired or misconfigured certificates often leading to service disruptions and operational overhead.
This lightning talk introduces the certmgr module in Ceph’s cephadm, which automates the lifecycle of TLS certificates across the cluster. We’ll briefly explore how certmgr handles certificate generation, distribution, and renewal, helping operators maintain secure communication with minimal manual intervention.
Slides: ceph.io/assets/pdfs/events/2026/ceph-days-london/management-in-ceph-with-certmgr.pdf










