Appliance Certificate Validation Status on ISG OS

Products

• SSP-S410 PLATFORM
• SSP-S410
• SSP
• SSP-S210 PLATFORM

Issue/Introduction

Introduced in ISG OS 2.4.9.1 is the Appliance Certificate Validation Status by the command "health monitor view settings".

(config)# health-monitoring
(config-health-monitoring)# view settings

Health Monitoring settings for all metrics:

                                         | Warning     | Critical    |
Metric Name                              | Threshold   | Threshold   | Alerts
-----------------------------------------+-------------+-------------+--------
Appliance Certificate Validation Status  | *180 days   > *30 days    | L
-----------------------------------------+-------------+-------------+--------
CPU Utilization                          | 85 %        < 95 %        | L T
-----------------------------------------+-------------+-------------+--------

Environment

ISG 2.4.9.1 and Higher

Resolution

Appliance certificate is an equivalent of the  "Appliance birth certificate". It can be viewed in the following CLI command.

(config)# ssl
(config-ssl)#

(config-ssl)# view keyring bluecoat-appliance
Keyring ID:                 bluecoat-appliance
Private key showability:    no-show
Key type:                   RSA
Key size:                   2048 bits
Signing request:            absent
Certificate:                present
Certificate subject:        C=US,ST=CA,O='Blue Coat Systems',OU=###,CN=######
Certificate issuer:         C=US,ST=California,L=Sunnyvale,O=Blue Coat Systems, Inc.,OU=Blue Coat, ABRCA,CN=abrca.bluecoat.com,[email protected]
Certificate valid from:     Nov 30 22:06:18 2021 GMT    
Certificate valid to:       Dec 01 22:06:18 2026 GMT   --> Expiring date
Certificate thumbprint:     ######

Warning Threshold and Critical Threshold are calculated "Certificate valid to" - current date/time.

Additional Information

If the ISG Appliance Certificate Validation Status shows unknown see this article.

To regenerate the appliance certificate you can follow this tech doc.