# Problem with AKS cluster certificates

**URL:** <https://forums.suse.com/t/problem-with-aks-cluster-certificates/18764>\
**Category:** General\
**Created:** [November 7, 2020, 2:38pm UTC](https://forums.suse.com/t/problem-with-aks-cluster-certificates/18764 "2020-11-07T14:38:51Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![pupsik-mupsik](https://avatars.discourse-cdn.com/v4/letter/p/7c8e57/32.png) [@pupsik-mupsik](https://forums.suse.com/u/pupsik-mupsik)\
**Post date:** [November 7, 2020, 2:38pm UTC](https://forums.suse.com/t/problem-with-aks-cluster-certificates/18764/1 "2020-11-07T14:38:51Z")

</div>

Good day! We have a kubernetes azure AKS cluster created from rancher 2 years ago. And today our cluster certificates expired. So we update them using this microsoft instruction [https://docs.microsoft.com/en-us/azure/aks/certificate-rotation](https://docs.microsoft.com/en-us/azure/aks/certificate-rotation).  
But after that we have a problem with rancher connecting to cluster:  
_This cluster is currently **Error** ; areas that interact directly with it will not be available until the API is ready._

_Cluster health check failed: Failed to communicate with API server: Get “[https://our-cluster-name:443/api/v1/namespaces/kube-system?timeout=45s](https://our-cluster-name:443/api/v1/namespaces/kube-system?timeout=45s)”: x509: certificate signed by unknown authority (possibly because of “crypto/rsa: verification error” while trying to verify candidate authority certificate “ca”)_

So it seems that the problem is with old kubeconfig file for this cluster in Rancher. Is there any way to update kubeconfig file in rancher, or some other way to fix this?  
Rancher version 2.5.1 dockerized