重新生成的AIQUM HTTPS证书不会反映在集群端
适用场景
- NetApp Active IQ Unified Manager (AIQUM)
- ONTAP 9
问题描述
- 在AIQUM WebUI中单击"重新生成HTTPS证书"不会停止 集群 端的事件日志：
mgmtgwd.certificate.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) <CERTIFICATE_NAME>, Serial Number <SERIAL>, Certificate Authority <UM> and type server-ca for Vserver <SVM> will expire in the next XX day(s)AUDIT-MLOG-TXT.GZ显示以下消息：
<netapp version='1.0' xmlns='http://www.netapp.com/filer/admin' nmsdk_version='9.8P2' nmsdk_platform='Windows Server 2016' nmsdk_language='Java'><security-certificate-install><type>client</type><private-key>XXX</private-key><certificate>-----BEGIN CERTIFICATE-----^M [CERTIFICATE] :: Pending:
security-certificate-install :: Error: duplicate entry
<netapp version='1.0' xmlns='http://www.netapp.com/filer/admin' nmsdk_version='9.8P2' nmsdk_platform='Windows Server 2016' nmsdk_language='Java'><ems-event-notification-destination-modify-iter><attributes><event-notification-destination><rest-api-url>XXX</rest-api-url><certificate-authority>[UM-UUID]</certificate-authority><certificate-serial>[SERIAL]</certificate-serial></event-notification-destination></attributes><query><event-notification-destination><name>[DESTINATION]</name></event-notification-destination></query></ems-event-notification-destination-modify-iter></netapp>^M :: Pending:
ems-event-notification-destination-modify-iter :: Success:
-
AUDIT-MLOG-TXT.GZ不显示security-certificate-delete、security-certificate-install应在上述内容后输出：
<netapp version='1.0' xmlns='http://www.netapp.com/filer/admin' nmsdk_version='9.8P2' nmsdk_platform='Windows Server 2016' nmsdk_language='Java'><security-certificate-delete><common-name>[COMMON-NAME]</common-name><type>server-ca</type><certificate-authority>[CA]</certificate-authority><vserver>[CLUSTER_NAME]</vserver><serial-number>[SERIAL]</serial-number></security-certificate-delete></netapp>^M :: Pending:
security-certificate-delete :: Success:
<netapp version='1.0' xmlns='http://www.netapp.com/filer/admin' nmsdk_version='9.8P2' nmsdk_platform='Windows Server 2016' nmsdk_language='Java'><security-certificate-install><type>server-ca</type><certificate>-----BEGIN CERTIFICATE-----^M [CERTIFICATE]... :: Pending:
security-certificate-install :: Success: