Alarm Triggered for Imminent vCenter Server Certificate Expiration

Products

• VMware vCenter Server 8.0

Issue/Introduction

This article describes the alarms that should be monitored to detect certificate expiration for vCenter Server.

Environment

vCenter Server 8.0

Cause

vCenter Server displays a “Certificate Status” alert in the vSphere Client when a certificate is approaching expiration.

Resolution

vCenter Server provides built-in alarms that monitor certificates nearing their expiration dates.

• Certificate Status
• KMS Client Certificate Status
• KMS Server Certificate Status
• Identity Source LDAP Certificate is about to expire
• STS Signing Certificates are about to expire
• VASA Provider certificate expiration alarm
• WS1 External IDP SSL Trust Certificates are about to expire
• ESXi Host Certificate Status

Additional Information

Use the vCert - expired certificate replacement script utility Option 1. Check current certificate status, to identify any expired certificates. 

Setting Up Email Notifications for Alarms generated in vCenter Server