---
name: satellite-ts-sat-ocp-console
title: Why can't I access the Red Hat OpenShift web console?
description: 'When you try to access your Satellite cluster through the Red Hat OpenShift console, you see an error message similar to the following:'
last-updated: 2024-01-03
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/satellite?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Why can't I access the Red Hat OpenShift web console?
{: #ts-sat-ocp-console}

When you try to access your Satellite cluster through the Red Hat OpenShift console, you see an error message similar to the following:
{: tsSymptoms}

```sh
2021-07-23T14:15:33Z auth: error contacting auth provider (retrying in 10s): request to OAuth issuer endpoint https://...us-east.satellite.appdomain.cloud:0000/oauth/token failed: Head https://...us-east.satellite.appdomain.cloud:0000: x509: certificate has expired or is not yet valid.
```
{: screen}

An expired or invalidated security ticket is preventing you from accessing the Red Hat OpenShift console.  
{: tsCauses}

Follow the steps to validate your certificate.
{: tsResolve}

1. [Access your Satellite cluster](https://cloud.ibm.com/docs/openshift?topic=openshift-access_cluster&format=markdown#access_cluster_sat).

2. Run the [`master refresh`](https://cloud.ibm.com/docs/openshift?topic=openshift-kubernetes-service-cli&format=markdown#cs_apiserver_refresh) command.

    ```sh
    ibmcloud oc cluster master refresh --cluster <cluster_id>
    ```
    {: pre}

3. Wait a few minutes and try to access the console again.