diff --git a/.subscription-manager.metadata b/.subscription-manager.metadata
index e5f94c5..4169b88 100644
--- a/.subscription-manager.metadata
+++ b/.subscription-manager.metadata
@@ -1,2 +1,2 @@
-71bff73e6850d16d768763c6c771c257791ca381 SOURCES/subscription-manager-1.21.10.tar.gz
-ce6c8d9a4c33d6a5d987afe2be213034ade2b103 SOURCES/subscription-manager-cockpit-1.21.10.tar.gz
+3fbdfd71dd14a4275ff1f35019ec100f32a93395 SOURCES/subscription-manager-1.21.10.tar.gz
+f47a1611b7e59e9d7712d8afffb2827017d366f7 SOURCES/subscription-manager-cockpit-1.21.10.tar.gz
diff --git a/README.debrand b/README.debrand
deleted file mode 100644
index 01c46d2..0000000
--- a/README.debrand
+++ /dev/null
@@ -1,2 +0,0 @@
-Warning: This package was configured for automatic debranding, but the changes
-failed to apply.
diff --git a/SPECS/subscription-manager.spec b/SPECS/subscription-manager.spec
index c2373e2..aa80817 100644
--- a/SPECS/subscription-manager.spec
+++ b/SPECS/subscription-manager.spec
@@ -132,7 +132,7 @@
 
 Name: subscription-manager
 Version: 1.21.10
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: Tools and libraries for subscription and repository management
 Group:   System Environment/Base
 License: GPLv2
@@ -1096,6 +1096,9 @@ gtk-update-icon-cache -f %{_datadir}/icons/hicolor &>/dev/null || :
 %endif
 
 %changelog
+* Wed Nov 07 2018 Christopher Snyder <csnyder@redhat.com> 1.21.10-3
+- 1646867: Do not update ent certs inside containers (csnyder@redhat.com)
+
 * Wed Sep 05 2018 Christopher Snyder <csnyder@redhat.com> 1.21.10-2
 - Fix up Makefile (csnyder@redhat.com)