diff --git a/.gitignore b/.gitignore
index 0fe2255..c709940 100644
--- a/.gitignore
+++ b/.gitignore
@@ -306,3 +306,4 @@ SOURCES/vpn-1.5.3.tar.gz
 /bootloader-1.0.0.tar.gz
 /storage-1.15.1.tar.gz
 /auto-maintenance-c79226927826b07d0d5299d736e32dbff3791663.tar.gz
+/keylime_server-1.1.2.tar.gz
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 39ce6ca..7977694 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ Changelog
 - [ha_cluster - high-availability firewall service is not added on qdevice node](https://issues.redhat.com/browse/RHEL-17874)
 - [ha_cluster - Timeout issue between SBD with delay-start and systemd unit](https://issues.redhat.com/browse/RHEL-4684)
 - [kdump - fix: retry read of kexec_crash_size](https://issues.redhat.com/browse/RHEL-3354)
+- [keylime_server - won't detect registrar start failure](https://issues.redhat.com/browse/RHEL-21946)
 - [logging - fix: check that logging_max_message_size is set, not rsyslog_max_message_size](https://issues.redhat.com/browse/RHEL-15038)
 - [network - Ansible RHEL network system role issue with ipv6.routing-rules the prefix length for 'from' cannot be zero"](https://issues.redhat.com/browse/RHEL-16501)
 - [podman - fix: add no_log: true for tasks that can log secret data](https://issues.redhat.com/browse/RHEL-19242)
diff --git a/rhel-system-roles.spec b/rhel-system-roles.spec
index 3f99623..385772f 100644
--- a/rhel-system-roles.spec
+++ b/rhel-system-roles.spec
@@ -19,7 +19,7 @@ Name: linux-system-roles
 Url: https://github.com/linux-system-roles
 Summary: Set of interfaces for unified system management
 Version: 1.23.0
-Release: 2.6%{?dist}
+Release: 2.7%{?dist}
 
 License: GPLv3+ and MIT and BSD and Python
 %global _pkglicensedir %{_licensedir}/%{name}
@@ -166,7 +166,7 @@ Source: %{url}/auto-maintenance/archive/%{mainid}/auto-maintenance-%{mainid}.tar
 %deftag 26 1.1.1
 
 %global rolename27 keylime_server
-%deftag 27 1.1.1
+%deftag 27 1.1.2
 
 %global rolename28 fapolicyd
 %deftag 28 1.1.0
@@ -221,6 +221,10 @@ Source1004: vendoring-build.inc
 Source995: CHANGELOG.md
 
 BuildArch: noarch
+# there is no ansible on i686, so when we get a builder that uses
+# this arch, the build fails with
+# No matching package to install: 'ansible-core >= 2.11.0'
+ExcludeArch: i686
 
 # Requirements for galaxy_transform.py
 BuildRequires: python3
@@ -664,6 +668,10 @@ find %{buildroot}%{ansible_roles_dir} -mindepth 1 -maxdepth 1 | \
 %endif
 
 %changelog
+* Fri Jan 19 2024 Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.7
+- Add ExcludeArch i686 to fix build issues with ansible-core
+- Resolves: RHEL-21946 : keylime_server - won't detect registrar start failure
+
 * Thu Jan 18 2024 Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.6
 - Resolves: RHEL-21537 : storage - lvmlockd process is not running - test only
 
diff --git a/sources b/sources
index 202164c..9050a1a 100644
--- a/sources
+++ b/sources
@@ -14,7 +14,7 @@ SHA512 (ha_cluster-1.13.4.tar.gz) = 729c589c8c039ee5002687b52af12108bee0b037e16a
 SHA512 (journald-1.1.1.tar.gz) = 527f9a7dab3b370ce11062287c323e292940e5967e9c7cc2fd94356ef85da123fa1f2962ee2bdb9a7fe733685c9428315553abf5608c69ea81d9d4648779b27b
 SHA512 (kdump-1.4.3.tar.gz) = bc8547c00a538d30a1b206d2e23b3e586ad48f466fef2303fb0dc1a443117a01861099c95f41fefd867f8123ff6c11b264552ebd7198089af635765c40111f18
 SHA512 (kernel_settings-1.2.1.tar.gz) = 09f9b04547ceffa44ef1775da0384c744dee911f57ba79ab9443513615c0e30efcf8826f526e887f32bcbf18c7410ab489539ba35dd825832149d0eee85158d3
-SHA512 (keylime_server-1.1.1.tar.gz) = be131d66ca49fb696c967363302fc17c5d3067f83ba362ca20e026aaaae3e856e9cdeff4442f470a4117fa9bea1c531873a9932441c59c06b34473261fa1ddc9
+SHA512 (keylime_server-1.1.2.tar.gz) = c0bdd3e570edcd1ba4dbbc61ae35015c82367f73f254acd3b06cb42fb88864042b383c8185f7611bcdb7eb219f484981fc5cb6c098ac2f2126a6bce1204401eb
 SHA512 (logging-1.12.3.tar.gz) = 94857858142fde4e24b197e19a6966e7fbd48ad4961ddc07630595c17568e332682cc0e2f27b00c6cd1501ec2a035e7e4a7773dc400a6557d83a953b33ee51b1
 SHA512 (metrics-1.10.0.tar.gz) = b47e2a8f0b856ed159945ebbf918a6ff6aadd334690a761bd3cc2476f56a40f2c7cdc1000a8b7d0097c0a619d0b4c01fd1340d4a8d645e587c9551f4e6218478
 SHA512 (nbde_client-1.2.15.tar.gz) = 6d3527018cf570f15fc35dc20e5cca9d1685e5a5213397387579e8a17172a766c90625da99ac744a38e75107b582c3106b772c6e7d2ecbab32ba7b3262781796