HPE OneView 8.00 or newer alert with "HPE Cloud Intermediate C2B01 is about to expire"

[ChrisLynch]

I am posting this thread as we work on a Customer Advisory so as to help reduce support cases.

Customers may observe the following warning message on their appliance starting with HPE OneView 8.0:

"CA certificate with alias name HPE Cloud Intermediate C2B01 is about to expire on 2023-03-12T00:00:00.000Z. Once the certificate is expired, communication with managed devices and external servers will be impacted"

Resolution

Delete the expiring certificate from the appliance. Then, generate a new certificate and add the new certificate to the appliance using the same alias name.

1. alertTypeID 

   Alerts.CertificateStatus.AboutToExpire

2. clearPriorEvents 

   true

3. correctiveAction 

   Delete the expiring certificate from the appliance. Then, generate a new certificate and add the new certificate to the appliance using the same alias name.

4. locked 

   true

5. resourceUri 

   /rest/certificates/ca/HPE Cloud Intermediate C2B01

This is due to new certificates being installed for an unreleased feature.  This message is benign and does not impact the overall functionality of the appliance.

Resolution

You can safely remove the following two certificates:

• HPE Cloud Intermediate C2B01
• HPE Cloud Policy CA C1801

Please do NOT remove the HPE Common Cloud Management Root CA C0001 certificate.  That should have been the only cert present on the appliance.  Removing certificates from the appliance does not require any downtime, nor a reboot of the appliance.

Sorry for the inconvenience here folks.

[abelmc]

Thanks for the post Chris. Could you please share the Customer Advisory link once available?

[Peter_Sun]

Hi,

Can you provide a correct procedure to reproduce a certificate in OneView? Thank you.

[ChrisLynch]

@Peter_Sun please create a new discussion topic in the forum here to ask your question.  Please be as detailed as possible.