Oneview 8.00 "HPE Cloud Intermediate C2B01 is about to expire"

[T_1_6]

We have this strange certificate expiring and generating a warning message.
I am concerned this might impact communication with remote support and HPE.

The message is as follows:-

"CA certificate with alias name HPE Cloud Intermediate C2B01 is about to expire on 2023-03-12T00:00:00.000Z. Once the certificate is expired, communication with managed devices and external servers will be impacted Security"

I have no idea at all how we would go about regenerating it, or what its used for, or anything!
Does anyone know?!

[ChrisLynch]

This might be related to HPE OneView update notification. This does not apply to OneView Remote Support. However, I am looking into this and why it is happening. Can you share the exact details of the appliance alert?

[T_1_6]

"CA certificate with alias name HPE Cloud Intermediate C2B01 is about to expire on 2023-03-12T00:00:00.000Z. Once the certificate is expired, communication with managed devices and external servers will be impacted"

Resolution

Delete the expiring certificate from the appliance. Then, generate a new certificate and add the new certificate to the appliance using the same alias name.

1. alertTypeID 

   Alerts.CertificateStatus.AboutToExpire

2. clearPriorEvents 

   true

3. correctiveAction 

   Delete the expiring certificate from the appliance. Then, generate a new certificate and add the new certificate to the appliance using the same alias name.

4. locked 

   true

5. resourceUri 

   /rest/certificates/ca/HPE Cloud Intermediate C2B01

   Is that enough?

   Thanks.

[chst]

Having the same issue here, Oneview version 8.00.00-0470555

[ChrisLynch]

Yes, this helped. You can safely remove that certificate from Settings -> Security panel -> Manage Certificates. It will not reduce or cause functional issues. It is present for a yet to be released feature, and should not have been present.

We will work on a customer advisory outlining this issue and resolution. But this is a benighn alert.

[T_1_6]

Nice one guys, cannot argue with that level of responsiveness.

If it helps any further, I have three of these types that got installed:-

[sfrench-quilter]

Thanks for this, we also saw the same alert today.

[ChrisLynch]

Correct.  You can safely remove the following two certificates:

• HPE Cloud Intermediate C2B01
• HPE Cloud Policy CA C1801

Please do NOT remove the HPE Common Cloud Management Root CA C0001 certificate.  That should have been the only cert present on the appliance.  Removing certificates from the appliance does not require any downtime, nor a reboot of the appliance.

Sorry for the inconvenience here folks.

[ChrisLynch]

I posted a pinned thread to this forum detailing the issue and resolution here.  This is to help customers while we work on a Customer Advisory.

[Weggo1]

Hello, plase tell me, when the advisory will be available

[DanCernese]

~one month ago:  https://support.hpe.com/hpsc/doc/public/display?docId=emr_na-a00129786en_us

[MarioE]

Is it possible that there are two incorrect entries in the advisory?

RESOLUTION

To clear the locked alert, the following two certificates can be safely removed:

• HPE Cloud Intermediate C2801
• HPE Cloud Policy CA C1801

In my case, the certificates are named:
- HPE Cloud Intermediate C2B01
- HPE Cloud Policy CA C1B01

[ChrisLynch]

It does appear to be a typo.  Regardless, those two certs can be safely removed from the appliance.