删除证书后、使用HTTPS的ONTAP AutoSupport验证失败

适用场景

• ONTAP 9.7 及更高版本
• AutoSupport
• 传输HTTPS

问题描述

• 从信任存储库中删除某些证书后、AutoSupport不再成功：

cluster1::*>system node autosupport check show-details -node * -check-type https-post-destination

Node: cluster1-01
 
Category: https
      Component: https-post-destination
       Status: failed
       Detail: HTTPS POST connectivity check failed for destination:
https://support.netapp.com/asupprod/post/1.0/postAsup.
           Error: Peer certificate can not be authenticated with
           given Certificate Authority certificates.
  Corrective Action: Certificate issue. Please make sure you have the correct
           Root Certificate installed

• 验证是否缺少以下证书

cluster1::>security certificate show-truststore -common-name AAACertificateServices

There are no entries matching your query.

cluster1::> security certificate show -common-name AAACertificateServices

There are no entries matching your query.

发生原因

• 缺少server-CA证书、 ONTAP使用此证书 向 HTTPS支持URL support.netapp.com/asupprod/post/1.0/postAsup进行身份验证
• 此证书的公用名称为 AAACerticateServices
• 已通过以下两种方式之一删除此证书：
  • 已执行高级权限命令security certificATE信任存储库clear：
    • cluster1::*>security certificate truststore clear
  • 已执行高级权限命令security certificATE delete：
    • cluster1::*>security certificate delete -vserver cluster1 -common-name AAACertificateServices -ca "AAA Certificate Services" -type server-ca -serial 01
• 错误 ID 1221636会跟踪此问题描述

解决方案

追加信息