Symantec VIP Enterprise Gateway contains expired or expiring trusted CA certificates

Products

• VIP Service

Issue/Introduction

The Trusted CA Certificate store shows expired or expiring certificates.

Example:

Cause

The VIP Enterprise Gateway installs many common Root CA certificates during the initial installation. Over time, they may expire when the validity date is reached. 

If the root or intermediate CA doesn't already exists, it must be added in the Trusted CA Certificate VIP settings of the Enterprise Gateway to complete the chain of trust for:

• Imported SSL certificates 
• LDAPS connections
• Tunnel forwarding

Resolution

Expired Trusted CA certificates can safely be ignored or deleted. To delete, click the Delete link next to the certificate, click Submit to confirm the deletion, then Save Changes. Restart the server to complete the operation.