Systems Management (OpenView-OP Mgmt) Practitioners Forum
Showing results for 
Search instead for 
Do you mean 

how to monitor certificates expiry on servers

Regular Visitor

how to monitor certificates expiry on servers

[ Edited ]

hi

anyone has any idea how to monitor certificate expiry and alert when it is expiring?

 

is there a script to do so?

 

i am using HP OM 

4 REPLIES
Honored Contributor

Re: how to monitor certificates expiry on servers

Hello

 

When you say certificates - what certificates do you mean? If you are referring to certificates used by OM server for server-agent communications then these certificates expire in 20 years from the time of issue. So there is no tool provided to alert on expiry.

 

Hope this helps or you get a better answer.

Regards

Ram

HPE Expert

Re: how to monitor certificates expiry on servers

Hi,

 

Adding to Ram´s answer the only license that you might see that expires would be an evaluation License that will last for 6 months and once it is expired you will receive a message that the license has expired in order for you to add the permanent license.

 

Regards,

 

HP Support      

                       

If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.

If you liked it I would appreciate KUDOs.

 

Thanks.

Regular Visitor

Re: how to monitor certificates expiry on servers

kudos to ram and edgardo,

 

sorry for the confusion, what i refer to is to use some HP OM policies to monitor certificates in the certificate store like e.g. ms cert store

 

thanks and hope you guys can help (:

Highlighted

Re: how to monitor certificates expiry on servers

Hi, did you check out the certutil command on windows - should be available by default with windows server 2008 and later. if not, it is part of the tool option pack.

this command provides many ways to work with windows certificates and stores. it also has options to list out the certificates nearing expiry time.

have a look at this blog post here - http://blogs.technet.com/b/pki/archive/2008/04/24/how-to-determine-all-certificates-that-will-expire-within-30-days.aspx

there's a script listed there - i have not tried it out but you can :)

hope this helps.
- ramd
HPE Software Rocks!