Deleting VSatellites¶
When you need to retire an existing VSatellite, you can delete it from the VSatellites page.
To delete a VSatellite, you'll delete it within TLS Protect Cloud™ and then delete the binaries from the file system where it's installed.
WARNING!
Deleting the very last VSatellite results in also permanently deleting any associated services, as well as the VSatellite's data encryption key (DEK), which contains all related keys and credentials. Learn more
Important
Deleting VSatellites with existing services running on them could cause an outage of those services. Before deleting any VSatellite, assign any associated services to a different VSatellite.
If you don't need the services any longer, you can delete the VSatellite without reassigning the services.
Reassign existing services to a different VSatellite¶
- Sign in to Venafi Control Plane.
- Click Settings > Services.
- In the left pane, click the service you want to reassign.
- Click the Administration tab.
- In the VSatellite section, click in the box and select a different VSatellite.
- Click Save.
Repeat these steps for every service running on the VSatellite you want to delete.
Delete a VSatellite from TLS Protect Cloud¶
- Click Settings > Services.
- Select the VSatellite you want to delete, and then click Delete.
- When prompted, click Delete to confirm that you want to delete it.
- Log in to TLS Protect Cloud.
- Click Settings > VSatellites.
- Select the VSatellite you want to delete, and then click Delete.
- When prompted, select I understand the risks of deleting the VSatellite, and then click Delete VSatellite to confirm.
Remove VSatellite binaries¶
After deleting any VSatellite in TLS Protect Cloud, remember to remove the VSatellite binaries from the server where it's installed.
You can remove the binaries from a command line using a vsatctl
command:
sudo ./vsatctl uninstall
Why are root privileges required?
The vsatctl uninstall
command deletes k3s
from /usr/local/bin
, which is owned by the root user.
If you installed VSatellite on RHEL, Oracle, or Rocky Linux, the vsatctl uninstall
command will remove the k3s-selinux
RPM package, which requires root privileges.
If you are already logged in as the root
user, you can omit the sudo
command.
TIP
See what else you can do using vsatctl.