Vserver 证书即将过期消息
适用于
- ONTAP 9
- MetroClusterTiebreaker
问题描述
数字证书即将过期。此时将显示以下错误消息：
Wed Jul 31 00:00:00 CDT [Cluster-01: mgwd: mgmtgwd.sign.cert.expiring:error]: A digital certificate with Fully Qualified Domain Name (FQDN) Cluster.netapp.com, Serial Number 1546D3D9B99A31C2, Certificate Authority 'Cluster_root-ca' and Certificate Authority Serial Number 1546D3C6C0690DFC for Vserver ADMIN will expire in 1 day(s).Cluster-01::> cert show -serial 1546D3D9B99A31C2
(security certificate show)
There are no entries matching your query.orMessage: mgmtgwd.sign.cert.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) mcctbadmin, Serial Number 17DE57CFAC965CFD, Certificate Authority 'MetroClusterTiebreaker' and Certificate Authority Serial Number 17DE57CF66F95FAC for Vserver axnppcls2a will expire in 29 day(s).
Description: This message occurs when a digital certificate for a Vserver is about to expire. Client-server communication will not be secure if the certificate expires.
Corrective Action: Sign a new digital certificate on the system using the 'security certificate sign' command.
Source: mgwd
Sequence#: 9274801
but when checking the cluster, expiring date is in 2034
cluster-a::> security certificate show -vserver axnppcls2a -common-name *iebr*
Vserver Serial Number Certificate Name Type
---------- --------------- -------------------------------------- ------------
cluster-a 17DE57CF66F95FAC
MetroClusterTiebreaker_17DE57CF66F95FAC_MetroClusterTiebreaker
root-ca
Certificate Authority: MetroClusterTiebreaker
Expiration Date: Sun Jul 02 10:24:16 2034
cluster-a 17DE57CF66F95FAC
MetroClusterTiebreaker_17DE57CF66F95FAC
client-ca
Certificate Authority: MetroClusterTiebreaker
Expiration Date: Sun Jul 02 10:24:16 2034
cluster-a 17DE57CF66F95FAC
MetroClusterTiebreaker server-ca
Certificate Authority: MetroClusterTiebreaker
Expiration Date: Sun Jul 02 10:24:16 2034