diff --git a/.gitignore b/.gitignore
index 62ae562..e563719 100644
--- a/.gitignore
+++ b/.gitignore
@@ -88,3 +88,4 @@
 /pki-11.0.3.tar.gz
 /pki-11.2.0-beta1.tar.gz
 /pki-11.2.0-beta2.tar.gz
+/pki-11.2.0-beta3.tar.gz
diff --git a/pki-core.spec b/pki-core.spec
index 0eb1d38..e70c573 100644
--- a/pki-core.spec
+++ b/pki-core.spec
@@ -14,13 +14,13 @@ Name:             pki-core
 # Downstream release number:
 # - development/stabilization (unsupported): 0.<n> where n >= 1
 # - GA/update (supported): <n> where n >= 1
-%global           release_number 0.3
+%global           release_number 0.4
 
 # Development phase:
 # - development (unsupported): alpha<n> where n >= 1
 # - stabilization (unsupported): beta<n> where n >= 1
 # - GA/update (supported): <none>
-%global           phase beta2
+%global           phase beta3
 
 %undefine         timestamp
 %undefine         commit_id
@@ -1260,6 +1260,10 @@ fi
 
 ################################################################################
 %changelog
+* Fri May 06 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
+- Rebase to PKI 11.2.0-beta3
+- Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]
+
 * Mon May 02 2022 Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.3.beta2
 - Rebase to PKI 11.2.0-beta2
 - Rename packages to idm-pki
diff --git a/sources b/sources
index cbd24a8..5f27331 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (pki-11.2.0-beta2.tar.gz) = 2ad5820b1dc6a18ab7c3f8eb0f1922059350bc9143d531e90029903d74325604e0bb6c980989f78fdeea6f557541c76b1306d5ed93e0ed87f1f95f8def1494be
+SHA512 (pki-11.2.0-beta3.tar.gz) = 3af51c8e15a3d3bd74e813bbf18db49b1c33d7097d1019e1a24c34e91850202271a52696d539ecae443f3e8624d674a0b29682a355b708dfbfe1f69f5f02a986