Skip to content

Deleting VSatellites

When you need to retire an existing VSatellite, you can delete it from the VSatellites page.

To delete a VSatellite, you'll delete it within Certificate Manager - SaaS and then delete the binaries from the file system where it's installed.

WARNING!

Deleting the very last VSatellite results in also permanently deleting any associated services, as well as the VSatellite's data encryption key (DEK), which contains all related keys and credentials. Learn more

IMPORTANT!

A backup DEK is not sufficient for recovery if the last VSatellite is deleted. Recovery requires that at least one VSatellite entry remains in your Venafi Control Plane account.

Important

Deleting VSatellites with existing services running on them could cause an outage of those services. Before deleting any VSatellite, assign any associated services to a different VSatellite.

If you don't need the services any longer, you can delete the VSatellite without reassigning the services.

Reassign existing services to a different VSatellite

  1. Sign in to Venafi Control Plane.
  2. Click Settings > Services.
  3. In the left pane, click the service you want to reassign.
  4. Click the Administration tab.
  5. In the VSatellite section, click in the box and select a different VSatellite.
  6. Click Save.

Repeat these steps for every service running on the VSatellite you want to delete.

Delete a VSatellite from Certificate Manager - SaaS

  1. Click Settings > Services.
  2. Select the VSatellite you want to delete, and then click Delete.
  3. When prompted, click Delete to confirm that you want to delete it.
  4. Log in to Certificate Manager - SaaS.
  5. Click Settings > VSatellites.
  6. Select the VSatellite you want to delete, and then click Delete.
  7. When prompted, select I understand the risks of deleting the VSatellite, and then click Delete VSatellite to confirm.

Remove VSatellite binaries

After deleting any VSatellite in Certificate Manager - SaaS, remember to remove the VSatellite binaries from the server where it's installed.

You can remove the binaries from a command line using a vsatctl command:

sudo ./vsatctl uninstall
Why are root privileges required?

The vsatctl uninstall command deletes k3s from /usr/local/bin, which is owned by the root user.

If you installed VSatellite on RHEL, Oracle, or Rocky Linux, the vsatctl uninstall command will remove the k3s-selinux RPM package, which requires root privileges.

If you are already logged in as the root user, you can omit the sudo command.

TIP

See what else you can do using vsatctl.