# Searching for detailed guide for Certification Authority change on on-premise cluster

**URL:** https://discuss.kubernetes.io/t/searching-for-detailed-guide-for-certification-authority-change-on-on-premise-cluster/29673
**Category:** General Discussions
**Tags:** docs, security
**Created:** [September 7, 2024, 11:53am UTC](https://discuss.kubernetes.io/t/searching-for-detailed-guide-for-certification-authority-change-on-on-premise-cluster/29673 "2024-09-07T11:53:11Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![Claudio\_Merli](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/claudio_merli/32/15727_2.png) [@Claudio\_Merli](https://discuss.kubernetes.io/u/Claudio_Merli)
#### Post date: [September 7, 2024, 11:53am UTC](https://discuss.kubernetes.io/t/searching-for-detailed-guide-for-certification-authority-change-on-on-premise-cluster/29673/1 "2024-09-07T11:53:11Z")

</div>

Hello everyone,  
I necessarily need to change the CA of my K8S cluster since the `admin.conf` file has been leaked. I tried renewing the certificates, but I can still access with the old ones. I’m looking online and in the official documentation, but I can’t find a detailed guide on how to create a new certification authority and change all the certificates used by the cluster. The cluster is not a production environment, so it can handle some downtime. Does anyone know how to help me?

### Cluster information:

Kubernetes version: 1.26  
Cloud being used: bare-metal  
Installation method: kubeadm  
Host OS: ubuntu  
CNI and version: `quay.io/tigera/operator:v1.29.0`  
CRI and version: `containerd containerd.io 1.6.12`