.Support for encryption of Pacemaker remote connections using SSL certificates You can now encrypt Pacemaker remote connections by using X.509 (SSL/TLS) certificates. Previously, only pre-shared keys (PSK) were supported for encryption. With support for SSL certificates, you can use existing host certificates for Pacemaker remote connections. To configure SSL/TLS certificates for Pacemaker remote connections: . Create a remote connection with the `pcs cluster node add-guest` command or the `pcs cluster node add-remote command`. When you create a remote connection, the connection uses PSK encryption. . Convert the remote connection to use certificates by updating the `PCMK_ca_file`, `PCMK_cert_file`, `PCMK_key_file`, and, optionally, the `PCMK_crl_file` variables on all cluster nodes and Pacemaker remote nodes. For information on configuring encryption with SSL certificates, see link: https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/configuring_and_managing_high_availability_clusters/index#ref_host-and-guest-authentication-of-remote-nodes-remote-node-management [Host and guest authentication of `pacemaker_remote` nodes].