topic Re: CertPlus Cert expiring in ONTAP Discussions

CertPlus Cert expiring

CourtneyPeel — Wed, 04 Jun 2025 12:29:08 GMT

Hi

I received the following alert mgmtgwd.certificate.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) Class2PrimaryCA, Serial Number 85BD4BF3D8DAE369F694D75FC3A54423, Certificate Authority 'Class 2 Primary CA' and type server-ca for Vserver..

The CertPlus cert is expiring shortly can I remove this cert to suppress the alerts as we use an internal CA?

Re: CertPlus Cert expiring

TMACMD — Mon, 10 Jun 2019 01:06:26 GMT

A couple of links to look at

What is the impact of an expired digital certificate used for a Vserver?

https://kb.netapp.com/app/answers/answer_view/a_id/1032196/loc/en_US

Re: CertPlus Cert expiring

CourtneyPeel — Mon, 10 Jun 2019 01:45:13 GMT

Thank you for the links, the Certplus root CA is expiring and does not seem to be renewing it is possible to remove this cert?

MS is removing these from in an upcoming update:

This release will disable the following roots (Root Certificate \ SHA-1 Thumbprint):

CertPlus Class 3P Primary CA \ 216B2A29E62A00CE820146D8244141B92511B279
CertPlus Class 3 Primary CA \ D2EDF88B41B6FE01461D6E2834EC7C8F6C77721E
CertPlus Class 3TS Primary CA \ F44095C238AC73FC4F77BF8F98DF70F8F091BC52

Re: CertPlus Cert expiring

donny_lang — Mon, 10 Jun 2019 20:12:13 GMT

Removing a certificate entirely can be done with the "security certificate delete" command.

Its documentation is located here:

https://docs.netapp.com/ontap-9/index.jsp?topic=%2Fcom.netapp.doc.dot-cm-cmpr-950%2Fsecurity__certificate__delete.html

Re: CertPlus Cert expiring

Yo-Soon — Sun, 16 Jun 2019 11:43:22 GMT