Identify what device(s) are associated to expired cert.

[Ruster007]

HI Guys - creating new thread for my question:

I have an expired cert that I'd like to delete in OneView. 

Before I delete it, I'd like to confirm what device or devices are associated with it.

Is the a command to acheive this, or something that can be achieved via the UI?

Thanks

[AmRa]

Hi

Navigate to OneView Settings->Security->Manage Certificates

In that section of the UI, you can click on alias name of the expired certificate. Once you click on alias name it will give you the details of the device for which the certificate was added in OneView appliance trust store.

[ChrisLynch]

Within the same screen, you can filter certificates based on certain states.  Click the drop down and you will see a number of items.

If you want to script this, you can with the following PowerShell Cmdlet:

# Get the list of certificates, looking to find certs that have expired.
Get-OVApplianceTrustedCertificate | ? { $_.Certificate.NotAfter -lt [DateTime]::Now }

The Certificate property of a returned object is of the System.Cryptogophy.X509Certificates.X509CertificateV2 class.  So you can do standard PowerShell/C# operations to that object.