跳转到主内容

如果我的ONTAP AutoSupport 证书过期、会发生什么情况?

Views:
69
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
core
Last Updated:

适用场景

  • ONTAP 9
  • AutoSupport

问题解答

EMS 消息

mgmtgwd.certificate.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) AddTrustExternalCARoot, Serial Number 01, Certificate Authority 'AddTrust External CA Root' and type server-ca for Vserver (vserver) will expire in the next (--) day(s).

  • 不会发生任何情况。您将继续使用HTTPS发送AutoSupport、并继续向support.netapp.com进行身份验证
  • NetApp使用ONTAP 证书信任存储库捆绑包中的现有未过期根CA续订了support.netapp.com X.509服务器证书
  • 无需执行其他操作

 

  • 证书即将过期

cluster1::> security certificate show -common-name Ad*
Vserver    Serial Number   Certificate Name             Type
---------- --------------- ---------------------------- ------------
cluster1   01              AddTrustExternalCARoot      server-ca
    Certificate Authority: AddTrust External CA Root
          Expiration Date: Sat May 30 10:48:38 2020

 

  • 新的签名证书(信任存储库捆绑包中已有)

cluster1::*> security certificate show -vserver cluster1 -common-name AAACertificateServices
Vserver    Serial Number   Common Name                            Type
---------- --------------- -------------------------------------- ------------
cluster1
           01              AAACertificateServices                 server-ca
    Certificate Authority: AAA Certificate Services
          Expiration Date: Sun Dec 31 18:59:59 2028

追加信息

 

Scan to view the article on your device