# Migrating Single Node Rancher to HA (CA certs issue) **URL:** \ **Category:** SUSE Rancher Prime\ **Created:** [July 31, 2020, 7:46am UTC](https://forums.suse.com/t/migrating-single-node-rancher-to-ha-ca-certs-issue/18072 "2020-07-31T07:46:58Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![ofekinger](https://avatars.discourse-cdn.com/v4/letter/o/aeb1de/32.png) [@ofekinger](https://forums.suse.com/u/ofekinger)\ **Post date:** [July 31, 2020, 7:46am UTC](https://forums.suse.com/t/migrating-single-node-rancher-to-ha-ca-certs-issue/18072/1 "2020-07-31T07:46:58Z")
Hi. When my team wanted to install Rancher in our air-gapped environment, we faced issues with the custom certificates that were created for the dedicated machines, so we ended up with a single-node instance running a self-signed certificate. Recently, we made some progress with the IT department and they’re setting up an internal ACME server that we can use to install Rancher HA. I read the migration guide in [https://rancher.com/blog/2019/2019-01-10-migrating-single-node-2-1-x-to-high-availability/](https://rancher.com/blog/2019/2019-01-10-migrating-single-node-2-1-x-to-high-availability/) and saw that the certificates should remain the same during the migration process, so we should use our existing, self signed certificate. What can we do to replace this self-signed certificate with cert-manager that’ll use our ACME server? Is it possible to migrate to an HA installation while changing the CA certificate? Thanks in advance! ---
**Author:** ![Negash](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/negash/32/675_2.png) [@Negash](https://forums.suse.com/u/Negash)\ **Post date:** [August 11, 2020, 7:17pm UTC](https://forums.suse.com/t/migrating-single-node-rancher-to-ha-ca-certs-issue/18072/2 "2020-08-11T19:17:42Z")
+1 single node rancher 2.4.5 in docker (empy /etc/kubernetes/ssl/)