Skip to main content
NetApp Knowledgebase

What will happen when my Autosupport Certificate in ONTAP expires?

Applies to

  • ONTAP 9
  • clustered Data ONTAP 8
  • Data ONTAP 8 7-mode
  • Autosupport

Answer

EMS message mgmtgwd.certificate.expiring: A digital certificate with Fully Qualified Domain Name (FQDN) AddTrustExternalCARoot, Serial Number 01, Certificate Authority 'AddTrust External CA Root' and type server-ca for Vserver (vserver) will expire in the next (--) day(s).

  • Nothing will happen. You will continue to send Autosupports using HTTPS and continue to authenticate with support.netapp.com
  • NetApp renewed the support.netapp.com X.509 server certificate using an existing unexpired root CA included in the ONTAP certificate truststore bundle
  • No further action is required

 

  • Certificate expiring

cluster1::> security certificate show -common-name Ad*
Vserver    Serial Number   Certificate Name             Type
---------- --------------- ---------------------------- ------------
cluster1   01              AddTrustExternalCARoot      server-ca
    Certificate Authority: AddTrust External CA Root
          Expiration Date: Sat May 30 10:48:38 2020

 

  • New signed Certificate (pre-existing in the truststore bundle)

cluster1::*> security certificate show -vserver cluster1 -common-name AAACertificateServices
Vserver    Serial Number   Common Name                            Type
---------- --------------- -------------------------------------- ------------
cluster1
           01              AAACertificateServices                 server-ca
    Certificate Authority: AAA Certificate Services
          Expiration Date: Sun Dec 31 18:59:59 2028

 

Additional Information

  • What is the Certificate Truststore?
  • Do not delete the certificate prior to May 30, 2020 doing so will cause Autosupport delivery to fail if the Transport is set to HTTPS
  • Bug 1245418: Provides a simple fix to remove Alert  messages from EMS for the pre-installed Truststore certificates provided by NetApp. This will also prevent ARS or event notifications from alerting you unnecessarily.