NSX-V Manager alert: Certificate ssoserverSign has expired
book
Article ID: 345778
calendar_today
Updated On:
Products
VMware NSX
Issue/Introduction
After SSO certificate expires on vCenter the entry below will keep showing up every twenty four hours on the NSX WebUI plug-in > Events > System Events, even though the certificate has been replaced on vCenter.
On vsm.log you will see the following entries: 2021-05-27 00:30:00.056 GMT INFO TaskFrameworkExecutor-11 EventServiceImpl:119 - - [nsxv@6876 comp="nsx-manager" level="INFO" subcomp="manager"] [SystemEvent] Time:'Thu May 27 00:30:00.054 GMT 2021', Severity:'Critical', Event Source:'Certificate Monitoring Service', Code:'360001', Event Message:'Certificate ssoserverSign has expired', Module:'Trust Store', Universal Object:'false'
These alerts are generated because of "expiryPreNotificationDuration" check on VC side, which runs at 00:30 everyday and job is to identify the certificates and System events are raised for expired and to be expired certificates. This includes certificates in DB as well as in VC keystore.