Vserver 証明書の有効期限が近づいているメッセージ
環境
- ONTAP 9
- MetroClusterTiebreaker
問題
デジタル証明書の有効期限が近づいています。次のエラー メッセージが表示されます。
Wed Jul 31 00:00:00 CDT [Cluster-01: mgwd: mgmtgwd.sign.cert.expiring:error]: A digital certificate with Fully Qualified Domain Name (FQDN) Cluster.netapp.com, Serial Number 1546D3D9B99A31C2, Certificate Authority 'Cluster_root-ca' and Certificate Authority Serial Number 1546D3C6C0690DFC for Vserver ADMIN will expire in 1 day(s).
Cluster-01::> cert show -serial 1546D3D9B99A31C2
(security certificate show)
There are no entries matching your query.
or
Message: mgmtgwd.sign.cert.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) mcctbadmin, Serial Number 17DE57CFAC965CFD, Certificate Authority 'MetroClusterTiebreaker' and Certificate Authority Serial Number 17DE57CF66F95FAC for Vserver axnppcls2a will expire in 29 day(s).
Description: This message occurs when a digital certificate for a Vserver is about to expire. Client-server communication will not be secure if the certificate expires.
Corrective Action: Sign a new digital certificate on the system using the 'security certificate sign' command.
Source: mgwd
Sequence#: 9274801
but when checking the cluster, expiring date is in 2034
cluster-a::> security certificate show -vserver axnppcls2a -common-name *iebr*
Vserver Serial Number Certificate Name Type
---------- --------------- -------------------------------------- ------------
cluster-a 17DE57CF66F95FAC
MetroClusterTiebreaker_17DE57CF66F95FAC_MetroClusterTiebreaker
root-ca
Certificate Authority: MetroClusterTiebreaker
Expiration Date: Sun Jul 02 10:24:16 2034
cluster-a 17DE57CF66F95FAC
MetroClusterTiebreaker_17DE57CF66F95FAC
client-ca
Certificate Authority: MetroClusterTiebreaker
Expiration Date: Sun Jul 02 10:24:16 2034
cluster-a 17DE57CF66F95FAC
MetroClusterTiebreaker server-ca
Certificate Authority: MetroClusterTiebreaker
Expiration Date: Sun Jul 02 10:24:16 2034