PKI_1.3.6.1.4.1.2011.6.122.34.0.2.11 hwPKICACertNearlyExpired
Description
PKI/4/PKICACERTNEARLYEXPIRED: OID [oid] the CA certificate is nearly expired. (CACertIssuer=[issuer], CACertSubject=[subject], CACertStartTime=[starttime], CACertFinishTime=[finishtime])
The CA certificate is about to expire.
Attribute
| Alarm ID | Alarm Severity | Alarm Type |
|---|---|---|
1.3.6.1.4.1.2011.6.122.34.0.2.11 |
Warning |
communicationsAlarm |
Parameters
| Name | Meaning |
|---|---|
oid |
Indicates the MIB object ID of the alarm. |
issuer |
Indicates the issuer of the CA certificate. |
subject |
Indicates the subject of the CA certificate. |
starttime |
Indicates the start time of the CA certificate. |
finishtime |
Indicates the end time of the CA certificate. |
Possible Causes
The CA certificate is about to expire. The CA certificate expiration time is less than the certificate expired prewarning time configured by the pki set-certificate expire-prewarning command.
Procedure
- Run the display clock command to check whether the device time is correct.
If not, run the clock datetime command in the user view to change the device time.
- Apply for a new certificate through SCEP or CMPv2 online or apply for a new certificate offline. For details, see the S2720, S5700, and S6700 V200R019C10 Configuration Guide - PKI Configuration.