Storage I/O filter certificate expired on the host triggers " Certificate status" Alarm on the vCenter server.

Products

• VMware vCenter Server

Issue/Introduction

When a storage I/O filter certificate  gets expired on the vCenter server it generates and alarm on the vCenter server.

Cause

 ESXi storage I/O filter certificates are expired.

Resolution

To regenerate the storage  I/O filter certificate for a specific ESXi host you follow the below steps.

1. Select the Host put it in maintenance mode. 

2. Disconnect the host from the inventory and reconnect it back. 

3. Restart the vmware-sps certificate from the vCenter server.

In case this does not remove the expired the certificate then remove the host from the inventory and add it back to the vCenter server. 

To manually delete the certificate follow the below KB article 

https://knowledge.broadcom.com/external/article/318887/certain-iofilter-providers-are-showing-a.html