How is it determined which AIQUM host registered server-ca certificate on cluster?
Applies to
- NetApp Active IQ Unified Manager (AIQUM)
- ONTAP 9
- Multiple AIQUM certificates are registered on cluster
Answer
It can be determined by Certificate Name because Certificate Name of server-ca certificate registered by AIQUM is based on hostname or IP address of AIQUM host.
Example:
::> security certificate show -serial <SERIAL>
Vserver Serial Number Certificate Name Type
---------- --------------- -------------------------------------- ------------
cluster1 <SERIAL> aiqum.demo.netapp.com server-ca
Certificate Authority: demo.netapp.com
Expiration Date: Sat Oct 11 20:09:48 2042Note:
If server-ca certificate is known to be AIQUM certificate and there is no corresponding AIQUM host, it can be safely deleted
