VASA Provider certificate expiration alarm limits

Products

• VMware vCenter Server

Issue/Introduction

VASA Provider certificate expiration alarm status marked as: Red/Green/Yellow

Environment

VMware vCenter Server

Cause

To track VASA Provider certificate expiration alarm, we can define below vpxd Events:
 

com.vmware.vc.sms.VasaProviderCertificateHardLimitReachedEvent - Triggered when provider certificate is in hard limit window. -> alarmStatus : RED
com.vmware.vc.sms.VasaProviderCertificateSoftLimitReachedEvent - Triggered when provider certificate is in soft limit window. -> alarmStatus : YELLOW
com.vmware.vc.sms.VasaProviderCertificateValidEvent - Triggered when provider certificate is valid (used to clear the alarm). -> alarmStatus : GREEN

Resolution

If the VASA provider certificate is about to expire (is within the soft/hard limit period), then the administrator should refresh the certificate.

vCenter has the following time limits for certificate expiry:

• Soft limit – Certificate will expire within 6 months.
• Hard limit – Certificate is about to expire within 1 month.