Certificate expiration warning: Symantec Class 3 Secure Server SHA256 SSL CA

[NJK-Work1]

In HPE OneView I am getting a certificate expiration warning for a "Symantec Class 3 Secure Server SHA256 SSL CA" certificate.

I am not sure what this is or where it is used.  We used an internal CA for our web interface certificate.  Is there another certificate the OneView itself uses that is separate from the one I assigned from our CA?  The instructions say to generate a new "Appliance Self-Signed Certificate" to fix the problem.  But since we use our own CA, I am not sure if I am supposed to do this.  Will this overwrite our our cert?

Any guidance on this?

Thanks

NK

[Weggo1]

Same problem detected today in the morning

[Simeli]

There is an article in the HPE support center:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00067457en_us

I had the same message and for me it was ok to simply delete these certificate.

Greetings Simeli

[Fueh]

Which version do you use?
I am on 6.60 and consider update to 8.10.

[Simeli]

I am on Version 6.60. to.
An update to version 8.10 is not possible at the moment since i'm waiting for the delivery of the composer 2 that we have ordered.

[Fueh]

Update to 6.60.03. don't solve this issue. I also delete the cert. Thanks for the document.

[Krisztian_Sagi]

I have  6.60.02-0467825

[MarioE]

I have four Synergy Composer 2 with version 7.00.00-0460837.
Then I have three HPE OneView VM - VMware vSphere appliance (for ProLiant servers) with version 8.00.00-0470555.
One of the three HPE OneView VM - VMware vSphere Appliance has no servers integrated (only test HPE OneView) and does not do remote support.

I have opened a case with HPE...
---
Here is the answer from HPE Support:

"Ich habe mir diese näher angeschaut: es handelt sich um 4 alte Root oder Intermediate Zertifikate, die der OneViiew Appliance zum Kommunikieren mit HPE Remote Support verwendete. Die wurden seit lange durch neuere ersetzt.

2 von denen laufen im April 2023 ab, die weiteren 2 – im Oktober 2023. Daher kam jetzt im Februar bei allen Appliances gleichzeitig ein Alert über die „erste Runde“ von ablaufenden Zertifikaten.

Falls diese alten Zertifikate in Ihren Appliances für nichts anderes als Remote Support verwendet werden, dann können Sie diese ruhig löschen.

Zur Referenz das folgende Dokument: https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=a00067457en_us.

Das Dokument ist immernoch gültig, trotz des älteren Datums."

[MV3]

Hello,

 If you have tried deleting the below certificates and still see the event messages, can you try rebooting the aplliance once and check if the error disappears?

Certificates to be removed.
VeriSign Class 3 Public Primary Certification Authority - G5
VeriSign Universal Root Certification Authority
Symantec Class 3 Secure Server CA - G4
Symantec Class 3 Secure Server SHA256 SSL CA