NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

AFF

AFF200 9.3P4 Digital certificate for a SVM (Storage Virtual Machine) has expired

thomas382
2,977 Views

Hello;

Our Autosupport alerts me that Digital certificate for a SVM (Storage Virtual Machine) has expired

The following certificates have expired: 054995932C8243, 054A0BCAD30B9B, 054A0C4B4848CB, ... and 1 other.

Potential Impact: Clients may not be able to connect to the cluster over secure (SSL based) protocols.

With  security certificate show i ge
Vserver    Serial Number   Common Name                            Type
---------- --------------- -------------------------------------- ------------
cluster1   054995932C8243  cluster1                               server
    Certificate Authority: cluster1
          Expiration Date: Wed Feb 28 12:34:11 2018


svm_cifs   054A0BCAD30B9B  svm_cifs                               server
    Certificate Authority: svm_cifs
          Expiration Date: Tue Mar 06 09:36:31 2018

svm_iscsi  054A0C4B4848CB  svm_iscsi                              server
    Certificate Authority: svm_iscsi
          Expiration Date: Tue Mar 06 10:12:26 2018

svm_nfs    054A0BF82F3094  svm_nfs                                server
    Certificate Authority: svm_nfs
          Expiration Date: Tue Mar 06 09:49:12 2018

 

 

 

 

KB ID: 27617   Fits for cdot 8.2 + 8.3, we have cdot 9.3P4 and we need slightly diferent syntax, so I want to verify that:

 

1. Can i renew the expired Certs without any connectivity loss?

2. Is this Command Syntax for cdot 9.3P4 correct?

security certificate create -vserver cluster1 -common-name cluster1 -size 2048 -type server -country AT -expire-days 3650 -hash-function SHA256

Many Thanks, Thomas

 

1 REPLY 1

chenguanghui
1,165 Views

hello:

Renewing the server certificate on the data SVM has no effect.

The following link is the command for CRL to renew a certificate.

    https://kb.netapp.com/on-prem/ontap/DM/Encryption/Encryption-KBs/How_to_renew_an_ONTAP_self-signed_SSL_certificate_via_command_line 

i hope to help you 

Best regards.

Public