由于AIQUM客户端证书过期、导致出现错误mgmtwd.certifice.expired

适用场景

• Active IQ Unified Manager (AIQUM)
• ONTAP 9

问题描述

• ONTAP  ERROR mgmtgwd.certificate.expiring 每天报告ERROR mgmtgwd.certificate.expired 或ERROR mgmtgwd.certificate.expiring 
  • mgmtgwd.certificate.expired: A digital certificate with Fully Qualified Domain Name (FQDN) <AIQUM_SYSTEM_ID>, Serial Number <SERIAL_NO>, Certificate Authority '<AIQUM_SYSTEM_ID>' and type client for Vserver <CLUSTER_SVM> has expired.
  • mgmtgwd.certificate.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) <AIQUM_SYSTEM_ID>, Serial Number <SERIAL_NO>, Certificate Authority '<AIQUM_SYSTEM_ID>' and type client for Vserver <CLUSTER_SVM> will expire in the next NN day(s).
• certificate show -type client ONTAP命令指示AIQUM为EMS订阅安装的客户端证书已过期

cluster1::> certificate show -type client
  (security certificate show)
Vserver   Serial Number   Certificate Name             Type
---------- --------------- -------------------------------------- ------------
cluster1   2B5E4C41     f9a179e6-091b-4325-8fe1-59d5e6e9fdd1  client
     Certificate Authority: f9a179e6-091b-4325-8fe1-59d5e6e9fdd1
        Expiration Date: Tue Aug 29 21:05:19 2023

• 在System Manager中删除证书失败：

The certificate could not be removed due to the following conflicts: The certificate issued by "xxxxxxxxxxxxxxx" with serial number "xxxxxxx" is in use by the rest-api EMS destination "xxxxxxxxxxx" and cannot be removed.