is there any way to force a refresh of the node key

Question

zwass · Answer

For a Fleet user I d recommend deleting the host from Fleet that would cause a re enrollment when the host next checks in and receives a `node invalid` message

zwass · Answer

I imagine there s some equivalent that could be done in any other TLS server implementation

clong · Answer

ah yeah we re not using fleet here yet

clong · Answer

is the node key just `osquery db IDENTITY`

seph · Answer

This is relatively easy from the server Less sure about the client If you re re enrolling do you need to keep any of the local state vs removing the entire database

zwass · Answer

gt is the node key just osquery db IDENTITY I think probably not The node key will be somewhere in the rocksdb database that I would expect to be opaque except when parsed by rocksdb

clong · Answer

thanks guys

Jams · Answer

Jams · Answer

``` node invalid false Optional return true to indicate re enrollment ```