Loading...
Loading...
Symptom CodeSeverityDescriptionCondition2097 WARNING (60 days) ERROR (30 days) CRITICAL (15 days) Certificate {Cert-id} {cert-type} for service {service} is about to expire in {number of days left} days. Expiry Date {certificate-expiration-date} Cert Type could be: CA or SERVER SERVICE: ALL for only Cert Type CA Service Name for Cert Type SERVERWarning (60 days): Sent once Error (30 days): Sent once Critical (15 days): Sent weekly
A x509 certificate is about to expire and the ECS user interface (UI) displays the following: Figure 1. ECS UI view: x509 Certificate Expiring
A certificate renewal must be run.How to validate the expiration date of a current certificate: Capture the certificate ID from the alerts. For example: urn:dellobs:x509:CA:ALL:432dfe85-8c2c-4f46-976b-fa43474686eaGet the list of x509 certificates: Endpoint: GET https://<HOST_OR_IP>:4443/rest/v1/x509-certificates/<CERT-ID> Check valid_to_timestamp and capture the id of the certificate which is about to expire. { "id": "urn:dellobs:x509:SERVER:GEO_TLS:c9726a94-4408-4358-b070-4d48d2c75bf6", <---- CERT ID "alias": null, "certificate": "-----BEGIN CERTIFICATE-----\nMIIE4zCCA0ugAwIBAgIUD0PZSgNaa+1351BzpyV1fyxdnUkwDQYJKoZIhvcNAQEL\nBQAwbzELMAkGA1UEBhMCUEwxDDAKBgNVBAgMA1dBVzEPMA0GA1UEBwwGV2Fyc2F3\nMRIwEAYDVQQKDAlTZW50aW5lbHMxETAPBgNVBAsMCFNlY3VyaXR5MRowGAYDVQQD\nDBFTZW50aW5lbHMgUm9vdCBDQTAeFw0yNjAxMjAwOTA1MzhaFw0yNzAxMjAwOTA1\nMzhaMBYxFDASBgNVBAMMC1NlcnZlciBDZXJ0MIIBojANBgkqhkiG9w0BAQEFAAOC\nAY8AMIIBigKCAYEAshTBAJdg6i6HqLEM3Iop6KJkXiM7r9Mn+ebVPDeVUR25CEKx\nEpFOu7RsPhGgVevH5LsWT2NaOk29dObONCtaAAfVJFHWkM4BMSJQLDWBot1DgHEt\nKYdL64OUOCqAFmAqgm/TP1e5WDmqYYw6Ibnt3Z6PAXyLiors7zrqmFnzNAOBT6T3\n7GN+5HugnwZiLv9/eWVjQ537wo4cYad1kkpgPqPM4orS+ERUNve4QSveaMhw5+sX\n+NQqiDyD6vnm4ENMziHZJFogkz0zLl92GGdekG2fBWmfq+3uN/7KnAI4qS7tsrlY\nLld4XiPnI/w2az4+viNt96oplLsoEaj8w+gsReAVWBzl3DSR2M3puzKyvpSrcElS\nnerikhO58qwzk1g44gfXmToE1QxeViwiHwryJMUPRZiks/5nfoO5wrzrzEq0t3VV\nqqE/AuSNoVbWqMMXJnJdKLsOv4prixALPUpeZIA2ixjewNvmXaRH3HjFuJKDgPtj\nQ9DJnC1s1Zc9w+XVAgMBAAGjgc8wgcwwCQYDVR0TBAIwADALBgNVHQ8EBAMCBaAw\nHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFMGA1UdEQRMMEqGSHVybjpz\ndG9yYWdlb3M6VmlydHVhbERhdGFDZW50ZXJEYXRhOmMzYjJkNmE4LTg2YTItNDhi\nYi1hMzMwLTQwODA2NWMwYmFkMjAdBgNVHQ4EFgQUocKfELp9TADMw5TPV/8R5wPZ\norowHwYDVR0jBBgwFoAUQIdV08pdxfqPIcUGFi4IebgEMREwDQYJKoZIhvcNAQEL\nBQADggGBAIXNpXWTloV+QkrPV1AQ021q6kl82rGYjIa06PDvVN2wH/hcdxkO3+U2\nqrc/90+lzKvgtwjkrsaXbmAiRH08AcMVueh0naWAg4H/0g3nsIJnOhzT34eXWyD5\nN+TtgRX2UBYWLAfucnpZjsBWpWZe79wlSJLlY1mhWDOEnyFfpBy6b10tk6Zf8oAm\nhJQHfqlSJrOBSXbKX3vaQWg25rjkLJxi7GNAlPFpbh+gfP1TqN5eezyrHsPOrDiw\n+iM5v9pN7YQM72ZyEH7fMWqYkjpzhOMOsTmp4ccT3q0czR5VsRw5/wcUbSmXLqEA\nC9vJRJAGh3+bY7aj6YIkM7iBmae/luqjXmWeSHPK+Iw2QmHESnsRlIu19zNnYOAZ\nfXuOdEEqmXVK0eEHlRMDLSuRfdKGcOIkGawz9ZAZaUKLErmAXxuT5SDBKSITY+c4\nb3wTNEH82N3k9gugiZzKVzuTSkpP60aYytnJZD1IlW0pyiyad/nQ0/1tf4ko1m9g\nHFmSGDsqEw==\n-----END CERTIFICATE-----\n", "type": "SERVER", <-------- CERT TYPE "service": "GEO_TLS", <-------- CERT SERVICE "certificate_format": "PEM", "is_current": true, "cert_fingerprint": "DA:7D:1E:58:AB:4A:0D:4B:29:40:A9:A6:1E:6F:36:55:E3:F3:AE:9B:70:8E:6C:D4:26:A7:FD:EB:E7:8E:81:1F", "subject_alternative_names": [ "urn:storageos:VirtualDataCenterData:c3b2d6a8-86a2-48bb-a330-408065c0bad2" ], "subject": "CN=Server Cert", "common_name": "Server Cert", "issuer": "CN=Sentinels Root CA, OU=Security, O=Sentinels, L=Warsaw, ST=WAW, C=PL", "organization": null, "organizational_unit": null, "city": null, "state": null, "country": null, "email": null, "valid_from_timestamp": "2024-01-20T09:05:38Z", "valid_to_timestamp": "2025-01-20T09:05:38Z", <------ Expiration Date "key_usage": "Digital Signature, Key Encipherment", "extended_key_usage": "TLS Web Server Authentication, TLS Web Client Authentication", "is_self_signed": false, "version": 3, "serial_number": 87147940042058668473582011637622088352030104905, "signature_algorithm": "RSA", "signature_hash_algorithm": "SHA-256", "public_key": "-----BEGIN PUBLIC KEY-----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\nZIA2ixjewNvmXaRH3HjFuJKDgPtjQ9DJnC1s1Zc9w+XVAgMBAAE=\n-----END PUBLIC KEY-----", "public_key_parameters": "3072 bit RSA", "is_valid": true } Upload a new Geo certificate using KB article ECS: Data and Management SSL Certificate Tool before the current certificate expires.
Click on a version to see all relevant bugs
Dell Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.