No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

HUAWEI CLOUD Stack 6.5.0 Alarm and Event Reference 04

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Security Management

Security Management

ALM-51020 The certificate is about to expire

Description

The system checks the validity period of the ER certificate, CA certificate, or IR certificate of the management plane and the service plane on a daily basis. This alarm is generated when the validity period of any certificate is less than 90 days.

Attribute

Alarm ID

Alarm Severity

Alarm Type

51020

Major

Processing error alarm

Parameters

Name

Meaning

Host

IP address of the node for which the alarm is generated.

Certificate Type

Type of the ER, CA or IR certificate.

Site Name

Name of the site for which the alarm is generated.

Impact on the System

  • If the ER certificate is invalid, you cannot log in to the management plane or the service plane web.
  • If the CA certificate is invalid, security management of the IR certificate and its key is unavailable.
  • If the IR certificate is invalid, the internal communication of the system is affected.

Possible Causes

The validity period of the certificate is less than 90 days.

Procedure

Manually update the corresponding certificates. For details, see "Certificate Management" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.

Clearing

The system checks the certificate validity at 00:00:00 after the certificate is updated. If the certificate is valid, the alarm is automatically cleared.

Related Information

None

ALM-51021 A Certificate Has Expired

Description

The system checks the validity period of the ER certificate of the management plane and the service plane on a daily basis. This alarm is generated when the validity period of any certificate expires or the certificate becomes invalid.

Attribute

Alarm ID

Alarm Severity

Alarm Type

51021

Critical

Processing error alarm

Parameters

Name

Meaning

Host

IP address of the node where the alarm is generated.

Certificate Type

ER certificate

Site Name

Name of the site for which the alarm is generated

Impact on the System

If the ER certificate is invalid, you cannot log in to the management plane or the service plane.

Possible Causes

The certificate has expired.

Procedure

  1. Handle the certificate expiration problem based on the type of the expired certificate.

    • If the ER certificate of Deployment Portal or Operation Portal has expired, log in to Maintenance Portal to replace the ER certificate of Deployment Portal or Operation Portal. For details, see "Certificate Management > Replacing Type A Certificates" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.
    • If the ER certificate on Maintenance Portal has expired, you cannot log in to Maintenance Portal. In this case, you need to update the ER certificate on Maintenance Portal and then update other certificates. For details, see section "Updating ER Certificates of O&M and Operation Nodes" in HUAWEI CLOUD Stack 6.5.0 Troubleshooting Guide.

Clearing

The system checks the certificate validity at 00:00:00 after the certificate is updated. If the certificate is valid, the alarm is automatically cleared.

Related Information

None

ALM-51022 The certificate update failed

Description

This alarm is generated when the certificate update failed.

Attribute

Alarm ID

Alarm Severity

Alarm Type

51022

Critical

Processing error alarm

Parameters

Name

Meaning

Certificate Type

Type of the ER or IR certificate.

Site Name

Name of the site for which the alarm is generated.

Impact on the System

The system cannot be managed.

Possible Causes

The new certificate does not meet the requirements.

Procedure

  1. Manually restore the certificates. For details, see "Certificate Management > Reference > Restoring the ER or IR Certificate That Failed to Be Updated" in HUAWEI CLOUD Stack 6.5.0 Security Management Guide.
  2. Check whether the alarm is cleared.

    • If the alarm is cleared, no further action is required.
    • If the alarm persists, contact Huawei technical support.

Clearing

This alarm is automatically cleared after the certificate is updated.

Related Information

None

Translation
Download
Updated: 2019-08-30

Document ID: EDOC1100062365

Views: 46070

Downloads: 33

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next