When the CA certificate chain of the database TLS certificate changes, you must update it on PKI Hub.

To update the validation chain of the database TLS certificate 

1. Run the clusterctl database info command to export the current database settings.
2. Copy the certificate chain from the console output and save it to a file. 
3. Edit the file and update the CA certificates in the database certificate validation chain. 

4. If the file contains certificates not related to the database, do not remove them.

5. Run the clusterctl database set command to import the updated file.
6. Redeploy all deployed solutions.