The expiry dates of the certificate for the agents are not the same

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

The expiry of the certificate for the agents are not the same even if the agents are installed on the same date. 

For example: 

DB Service agent:
U02000308 Agent certificate file  '.\security\DB_SERVICE01.cert' was loaded, expiration date 'Tue Mar 18 10:09:54 CDT 2025'.

SQL Agent:
U02000308 Agent certificate file '.\security\SQL.cert' was loaded, expiration date 'Fri Mar 28 19:28:25 CDT 2025'.

Environment

CA Automic Workload Automation - Automation Engine: v21.x

Cause

By design.

Resolution

It is normal because there's a key called AGENT_CERTIFICATE_END_SPREAD in the UC_AGENT_TLS_SETTINGS variable. The AWA system makes sure that not all agent's certificate expire at the same time.

 

Reference:

https://docs.automic.com/documentation/webhelp/english/AA/21.0/DOCU/21.0.9/Automic%20Automation%20Guides/Content/AWA/Variables/UC_AGENT_TLS_SETTINGS.htm?Highlight=AGENT_CERTIFICATE_END_SPREAD