Cluster acquisition fails in AIQUM due to expired CA certificate for Mutual TLS communication

Applies to

• Active IQ Unified Manager (AIQUM) 9.12 and later
• ONTAP 9.10 and later
• Enabled Mutual Transport Layer Security (mTLS / Mutual TLS) for ONTAP cluster

Issue

• AIQUM DASHBOARD shows Cluster discovery failed. Rediscover the cluster after resolving the issue.
• Events Cluster Monitoring Failed and Mutual TLS Certificate Expire triggered
• ocumserver.log shows error:
  
  INFO [oncommand] [org.springframework.jms.listener.DefaultMessageListenerContainer#0-1] [com.netapp.ipc.jms.OCIE_Events] OCIE JMS notification message received: {WarningCount=0, DatasourceName=<cluster_name>, DatasourceID=1, Error0_ClusterManagementIP=<cluster_name>, PackageName=netappfoundation, TotalReportTime=-1, PollStartTime=1711675762833, ErrorCount=1, Success=false, DurationTime=554, Error0_Message=[Device name <cluster_name>]: Communication problem with the cluster: <cluster_name>, command: system-get-version, error: 'Received fatal alert: certificate_expired' on try 5 out of 5, TotalZAPITime=-1, NotificationType=PACKAGE_COMPLETED, Error0_Type=NETWORK_ACCESS_FAILURE, UpdateTime=1711675763398, Error0_Port=443, MessageType=PACKAGE_NOTIFICATION, Error0_Zapi=system-get-version}
   
• au.log shows error:

ERROR [common-pool-XX] c.o.s.a.d.n.t.z.ZAPIConnection (ZAPIConnection.java:442) - [netappfoundation] <cluster_name> - Communication problem with the cluster: <cluster_name>, command: system-get-version, error: 'Received fatal alert: certificate_expired' on try 5 out of 5