How to renew a client-ca certificate for Active IQ Unified Manager
Applies to
- Active IQ Unified Manager (AIQUM)
- ONTAP 9
Description
- Describe how to renew certificate of type "client-ca" made by AIQUM.
- Follow the how-to steps when a certificate is expired or about to expire:
Expiring:
[mgwd: mgmtgwd.certificate.expiring:error]: A digital certificate with Fully Qualified Domain Name (FQDN) <AIQUM username>, Serial Number XXXXXXXXXXXX, Certificate Authority '<AIQUM username>' and type client-ca for Vserver <cluster-management-SVM> will expire in the next 18 day(s).
Expired:
[mgwd: mgmtgwd.certificate.expired:error]: A digital certificate with Fully Qualified Domain Name (FQDN) <AIQUM username>, Serial Number XXXXXXXXXXXX, Certificate Authority '<AIQUM username>' and type client-ca for Vserver <cluster-management-SVM> has expired.
- Confirm expired or expiring certificate before renew client-ca certificate.
Cluster::*> certificate show -cert-name admin
(security certificate show)
Vserver Serial Number Certificate Name Type
---------- --------------- ----------------- ------------
<cluster-management-SVM> XXXXXXXXXXXX <AIQUM username> client-ca
Certificate Authority: <AIQUM username>
Expiration Date: Mon Sep 23 13:47:08 2024
