How to check the certificate expiration for a standalone Aria Automation Orchestrator 8.18.1

Products

• VCF Automation

Issue/Introduction

This KB provides steps to verify the certificate validity in a standalone deployment of Aria Automation Orchestrator 8.18.1.

Note: Starting with Automation Orchestrator 8.18, the Control Center service is deprecated and is removed in Automation Orchestrator 8.18.1 and later.

Environment

Aria Automation Orchestrator 8.18.1

Resolution

Checking the TLS Certificate Expiration

1. Connect to the Aria Automation Orchestrator Appliance via SSH and login as the root user.
   
   
2. Run the following command to check the notAfter (expiration) date and time:
   
   vracli certificate ingress --list | openssl x509 -noout -dates
   
   Example:
   
   # vracli certificate ingress --list | openssl x509 -noout -dates
   notBefore=<Abbreviated Month Name> DD HH:MM:SS YYYY GMT
   notAfter=<Abbreviated Month Name> DD HH:MM:SS YYYY GMT <== Check
   
   Note: The same output can also be confirmed with the following command.
   
   echo | openssl s_client -connect <Aria Automation Orchestrator FQDN or IP Address>:443 2>/dev/null | openssl x509 -noout -dates
   
   

Checking Expiration for Dunes, SSO Keystore, and CA Keystore

1. Login to the Aria Automation Orchestrator UI.
   
   
2. Select Administration > Inventory.
   
   
3. Expand Configuration > Keystores.
   
   
4. Expand each keystore (Dunes, SSO Keystore, and CA keystore), select the relevant certificate, and check the notAfter (expiration) date and time.

Additional Information

• スタンドアロン構成の Aria Automation Orchestrator 8.18.1 で証明書の有効期限を確認する方法
  
  
• Manage Automation Orchestrator certificates