title: Adding a new organization in a running network deployed on different hosts
body: <p>I am running a network of 3 organizations, each running in it's own AWS instance. I deployed the network using a 3 organizations version of Altoros' Ansible Fabric Starter with Raft ordering (<a href="https://github.com/Altoros/Ansible-Fabric-Starter" rel="nofollow noreferrer">https://github.com/Altoros/Ansible-Fabric-Starter</a>). Now I would like to extend it, while it runs, by adding a fourth organization on a fourth host. How can it be done?</p>
  
  <p>I've already found the tutorial in HF's documentation (<a href="https://hyperledger-fabric.readthedocs.io/en/release-1.4/channel_update_tutorial.html" rel="nofollow noreferrer">https://hyperledger-fabric.readthedocs.io/en/release-1.4/channel_update_tutorial.html</a>) and a similar one in Medium (<a href="https://medium.com/@kctheservant/add-a-new-organization-on-existing-hyperledger-fabric-network-2c9e303955b2" rel="nofollow noreferrer">https://medium.com/@kctheservant/add-a-new-organization-on-existing-hyperledger-fabric-network-2c9e303955b2</a>) for a network running in the same host. I've also managed to some extent to adapt it to my multi-host network, but I encounter the following error when running <code>peer channel join -b mychannel.block</code> from the cli of the new organization (org3):</p>
  
  <pre><code>Error: proposal failed (err: rpc error: code = Unknown desc = access denied: channel [] creator org [org3MSP])
  </code></pre>
  
  <p>And the logs of the orderer of org0 show:</p>
  
  <pre><code>[protoutils] ValidateProposalMessage -&gt; WARN 085 channel []: MSP error: the supplied identity is not valid: x509: certificate signed by unknown authority
  [comm.grpc.server] 1 -&gt; INFO 086 unary call completed grpc.service=protos.Endorser grpc.method=ProcessProposal grpc.peer_address=172.19.0.3:35236 error="access denied: channel [] creator org [org3MSP]" grpc.code=Unknown grpc.call_duration=970.013µs
  </code></pre>
  
  <p><strong>I also find it quite difficult (at least not straight forward) to add a new organization, even in a single host network, and it got me wondering if I had not missed something (because I would expect the addition of a new organization to be something quite useful and common in a lot of use cases, and I was therefore surprised by the complexity of the task).</strong></p>