A digital certificate expired

[SVHO]

Hello,

We got the following.  Is this going to cause any distruption to regular users accessing files?  If it is just the management interface, then only a few of us access this and our subnet is locked up (don't loose any sleep over it).

mgmtgwd.certificate.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) xxx_svm1, Serial Number 0xxx695852C222, Certificate Authority 'xxx_svm1' and type server for Vserver xxx_svm1 will expire in the next 1 day(s).
Message Name:
mgmtgwd.certificate.expiring
Sequence Number:
49588
Description:
This message occurs when a digital certificate for a Vserver is about to expire. Client-server communication will not be secure if the certificate expires.
Action:
Install a new digital certificate on the system using the 'security certificate create' or 'security certificate install' command.

Thanks,

TT

[AlexDawson]

Hi there! This certificate is used when applications integrate directly with SVMs and are set to stritctly check certs. 

The certificate can be renewed by following the instructions in this article - https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_renew_a_Self-Signed_SSL_certificate_in_ONTAP_9

Hope this helps!

[AubreyT]

The link pointed me to the cli page to create a new certificate and delete my old one. Thanks!

[weiliu]

You can update your digital certificate on the graphical management page as described in the URL

https://kb-cn.netapp.com/on-prem/ontap/dm/System_Manager/SM-KBs/How_to_renew_an_ONTAP_selfsigned_certificate_via_System_Manager