# Rancher restore

**URL:** <https://forums.suse.com/t/rancher-restore/43107>\
**Category:** General\
**Created:** [May 7, 2024, 6:41pm UTC](https://forums.suse.com/t/rancher-restore/43107 "2024-05-07T18:41:04Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![sjairam](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/sjairam/32/10477_2.png) [@sjairam](https://forums.suse.com/u/sjairam)\
**Post date:** [May 7, 2024, 6:41pm UTC](https://forums.suse.com/t/rancher-restore/43107/1 "2024-05-07T18:41:04Z")

</div>

Hi

I`m on Rancher. 2.8.2 with K8 1.27.x

When we try to restore an older backup from the S3 backup bucket.  
We get this error:

4m29s Warning CannotRegenerateKey certificate/tls-rancher-ingress User intervention required: existing private key in Secret “tls-rancher-ingress” does not match requirements on Certificate resource, mismatching fields: [spec.privateKey.size], but cert-manager cannot create new private key as the Certificate’s .spec.privateKey.rotationPolicy is unset or set to Never. To allow cert-manager to create a new private key you can set .spec.privateKey.rotationPolicy to ‘Always’ (this will result in the private key being regenerated every time a cert is renewed)

Any ideas?