OneView 8.00.00 Leaf certificate about to expire.

[DaveGreer]

Hi. Our OneView dashboard is showing the following alert:-

Leaf certificate withe alias name .... is about to expire. (The date is 1 Feb 2024)

The resolution says delete the expiring certificate from the appliance, then generate a new certificate and add it using the same alias name. I can't find a procedure to this, searching the forum shows that this might be a bug or require a opening a call with HPW to resolve. Any suggestions most welcome.

Many thanks

[Sebasbin]

Hi,

I would suggest to look for this certificate from OV --> Settings --> Security --> Manage certificates and get details of the certificate.
Then request for new certificate from OV --> Settings --> Security  and request for new certificate and add it.

Also refer:-https://www.youtube.com/watch?v=oR7tEK8G6cA (HPE OneView: Replace self-signed certificate with CA-signed certificate)

[DaveGreer]

Hi @Sebasbin 

Thanks for the reply. I might not have been clear enough in my opening post, the leaf certificate that needs renewing displays the following Resolution when I click on it:-

Regenerate certificate on the device or server to which this certificate belongs to. Remove this about to expire certificate and add the newly generated certificate to the appliance. Refer to the device and appliance documentation for specific details.

If I connect to the IP address of the device as suggested, it opens up our vSPhere client. If I go to Administration, Certificates, Certificate Managemtn, I cna see 5 other certificates for the appliance but not the leaf certificaet present in OneView.

Many thanks

[Vinky_99]

@DaveGreer 

Good day!

It seems that the leaf certificate in question is associated with a device or server outside of the HPE OneView interface, and you are looking for guidance on how to manage and regenerate that specific certificate. In this case, if the device is accessible through the vSphere client, you may need to address the certificate renewal within the vSphere environment. Here are general steps you can follow:

>> Access the vSphere Client- Log in to the vSphere Client using the appropriate credentials.

>> In the vSphere Client, go to the Administration section and look for a Certificate Management or Security option.

>> Identify the specific certificate associated with the device or server in question. This might involve finding a certificate with the same alias name or related details.

>> Regenerate the Certificate>> Follow the steps within the vSphere environment to regenerate the certificate. This process may involve generating a new certificate, providing necessary details, and confirming the generation.

>> After generating the new certificate, locate the old or expiring certificate and remove it. Confirm the removal.

>> Apply the newly generated certificate to the device or server. This step may involve importing or adding the certificate to the appropriate location within the vSphere environment.

>> Confirm that the new certificate has been successfully applied and that the expiration date has been extended.

>> In some cases, you may need to restart services on the device or server to ensure that the changes take effect.

Please note the exact steps might vary depending on the version of vSphere you are using. Refer to the vSphere documentation for your specific version for accurate and detailed instructions.

If you are unable to find the leaf certificate in the vSphere Client or encounter any difficulties during the process, it's recommended to consult the documentation specific to your vSphere version.

Hope the info helps...Let me know

[DaveGreer]

Hi. Thanks for your reply.

On the third bullet point, I can't see the certificate in vSphere. There are 5 but none of them are bout to expie. I'll have to rummage through the documentation.

Many thanks

[TrevEvans]

@Sebasbin,

hey that YT vid sadly set to private so cant view it.