Endpoint Detection and Response shows appliance shows an alert for an expired SEPM certificate

Products

• Endpoint Detection and Response
• Advanced Threat Protection Platform

Issue/Introduction

You may see a system health alert for an expired Symantec Endpoint Protection Manager (SEPM) certificate, even if the host or IP the certificate is for is no longer configured on the SEDR appliance.

Environment

SEDR 4.x

Cause

This can occur if an older SEPM was previously configured and the database entry for it was not properly purged.

Resolution

Please contact Broadcom technical support for manual remediation.