Receiving CA Certificate is about to expire in OneView

[asadsarwarawan]

customer reported that they're receiving CA certificate about to be expired. please guide how to generate new certificate and replace it with the existing one. please also tell us about how long before expiring we receive these warnings as certificate is expiring in April. Thanks

[sfrench-quilter]

Just so you know there have been several public CA certs in OneView that can be safely removed and are not used.

For example: 
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-a00067457en_us

Is the CA certificate reported an internal issuing CA or a public issuing CA?

[ChrisLynch]

Can you provide any sample screenshot of this cert and the associated message?

[storageteamUlta]

@ChrisLynch Im receiving this error message from our Image Streamer.

CA certificate with alias name Symantec Class 3 Secure Server CA - G4 is about to expire in 5 day(s),23 hour(s),34 minute(s),57 second(s)

i would upload a photo, but Im getting permission denied.

[sfrench-quilter]

The certificate can be removed as per the link I posted.
Here are the details from the article:

The certificates that can be removed are as follows:

• VeriSign Class 3 Public Primary Certification Authority - G5
• VeriSign Universal Root Certification Authority
• Symantec Class 3 Secure Server CA - G4
• Symantec Class 3 Secure Server SHA256 SSL CA

If any of the four CA certificates (mentioned above) are being used to sign into any other device, appliance or directory server certificates, besides the certificates for Remote Support, certificate validation errors will occur. The certificate validation failures will lead to issues, such as:

- Communication problems between OneView and the managed devices and servers

- Appliance certificate alert messages stating that the root certificate is missing

To delete the certificates, perform the following steps:

1. Log into the OneView User Interface (UI).
2. Select OneView -> Settings.
3. Scroll under "Security" and click the "Manage Certificates" link.
4. Delete the following certificates:
   - VeriSignClass 3 Public Primary Certification Authority - G5
   - VeriSignUniversal Root Certification Authority
   - SymantecClass 3 Secure Server CA - G4
   - SymantecClass 3 Secure Server SHA256 SSL CA
5. Wait for the deletion(s) to be completed.
6. Close the UI.