`lxsoft` and `lsb` (Koji) have Sectigo certificates, which are trusted by all clients. These
certificates have a validity of 1 year and they need to be requested to IT-PW / Andreas Wagner.
For reference, the last request for Koji certificates was [RQF2840607](https://cern.service-now.com/service-portal?id=ticket&table=u_request_fulfillment&n=RQF2840607) and for lxsoft certificates was [RQF2218420](https://cern.service-now.com/service-portal?id=ticket&n=RQF2218420).
For reference, the last request for Koji certificates was [RQF2840607](https://cern.service-now.com/service-portal?id=ticket&table=u_request_fulfillment&n=RQF2840607) and for lxsoft certificates was [RQF3013533](https://cern.service-now.com/service-portal?id=ticket&n=RQF3013533).
> **_NOTE:_** The lxsoft certificate is valid until 22 Feb 2026.
After the certificate is issued, it can be updated using the corresponding gitlab repo of each hostgroup. e.g.:
* For lxsoft [here](https://gitlab.cern.ch/ai/it-puppet-hostgroup-lxsoft). Example update for [lxsoft](https://gitlab.cern.ch/ai/it-puppet-hostgroup-lxsoft/-/commit/8692f5ead5f4220d39a516574aa09aa2c1f1d914).
* For lxsoft [here](https://gitlab.cern.ch/ai/it-puppet-hostgroup-lxsoft). Example update for [lxsoft](https://gitlab.cern.ch/ai/it-puppet-hostgroup-lxsoft/-/commit/ada0d196be941ec1a344493171e2a436ebdfcb1d).
* For koji [here](https://gitlab.cern.ch/ai/it-puppet-hostgroup-lsb). Example update for [lsb](https://gitlab.cern.ch/ai/it-puppet-hostgroup-lsb/-/commit/8afd6c9792cf34888f015aea3681dd5bd1d3a21b).
After that, run puppet and restart collectd on each lxsoft/koji web node.