Working in an environment with 50k+ non-domain joined machines and am seeing the dreaded chunk error in filldb. The id’s that correspond are nothing in particular special or part of the infrastructure. I see quite a few different ID’s and am considering the route suggested in http://www-01.ibm.com/support/docview.wss?uid=swg21684780 - but am hesitant because of other posts where potential issue show up as clients not being able to connect. I do not want to cause clients to no longer be able to report in if there is a mismatched certificate somewhere.
I want to know how much risk is involved in rotating those keys/certificates. Can someone verify that after re-creating the keys that the process would not destroy the environment? I don’t see a doc explaining explicitly how that process works or the flow.
Any help would be appreciated.