SSL certificate expiration CCMS Monitoring

Hi All,
We are using ECC 6.0 server, HP-Unix and Oracle 10.2.0.5 database.
CCMS monitoring is setup in our environment for alerts Monitoring. We use SSL certificates for SSO logins.
As we know SSL certificates get expire in approx one year and when 2-3 days left in certificate expiration system start showing message to all uses for this cetificate expiration.
Now we are planning to include SSL certificate expiration in CCMS monitoring so that whenever before 10-15 days we get a message for certificate expire and we implmenet the certificate without any User intervention.
Now we search a lot but I do not find any option available in RZ20 and RZ21 to include this alert in CCMS.
Please let me do we have any way by which we can get an message of certification before user get this message.
Shivam

Hi Murali,
Thanks for the reply.
I checked links and they are meeting my requirement but one thing I could not find is SSL information in RZ20.
I checked RZ20 tcode and I do not find where SSL information is available to assign auto reaction method to it to start getting Alert.
Can you please help me where I can find SSL certification path in RZ20.
Shivam

Similar Messages

SSL Certificate Expired Indesign CS6

So I open Indesign this morning and find that the SSL Certificate has expired. So my question is, since Adobe has come out with CC, is this going to be the trend at Adobe? Is this going to be Adobe's way of telling me to go CC? Because I am certainly not impressed that I have to go in and change settings so I do not get the message posted below every time I open Indesign, which is a legitimate paid for copy. I am planning on going to CC, but when I am ready. As you can tell I am not pleased to be posting this.

Fyredept wrote:
So I open Indesign this morning and find that the SSL Certificate has expired. So my question is, since Adobe has come out with CC, is this going to be the trend at Adobe? Is this going to be Adobe's way of telling me to go CC? Because I am certainly not impressed that I have to go in and change settings so I do not get the message posted below every time I open Indesign, which is a legitimate paid for copy. I am planning on going to CC, but when I am ready. As you can tell I am not pleased to be posting this.
I may be totally wrong here, but this might be originating in the security settings of your browser or other Internet connection settings. SSL is a more-secure way for stuff to travel the 'Net, and some browsers or other Internet tools that manage your accounts and connections, have a setting to make SSL the connection type every time to open a Web site or page. There should be somewhere in yor browser or elsewhere in your Internet account connections manager, that specifies using SSL always. There may be a way to reset the certificate, or to request that it be renewed. Perhaps check with your ISP (Internet Service Provider) tech support. Possibly the SSL issue is managed at their level. Also, if you're in a corporate environment, check with your IT support folks.
HTH
Regards,
Peter
Peter Gold
KnowHow ProServices

VPN Concentractor SSL Certificate Expired - Urgent Help

We have VPN concentractor 3030. Whe I log on via web its says that SSL certificate has expires and I cannot login to generate new certificate.
I even tried login via consol but it won't allow the connection.
What can I do.

The CONSOLE has nothing to do with the certificate. No matter what you should see the console prompt. If you cannot, make sure you are using a STRAIGHT THROUGH DB9 cable.
NOTE: This cable is different from the one used by PIX 520 and IDS boxes.
Regards
Farrukh

SSL Certificate expired

Hello
I've updated our internal application SSL certificates on our core WAEs group, for some reason it didn't push the updated ones down to the branch WAEs. The users are getting the expired cert error. The work around for now was to disable the SSL cert. Is there a procedure on how to update the SSL certs on your core WAEs? How can I check the branch WAE where the expired cert if being stored, it's not showing up when you issue a show
crypto certificates. I went and updated the existing ones with the new ones and the date had changed correctly.
WAEs - 4.2.1
CM - 4.4.1

Hi John,
I believe Ahmad is talking about this link, here is the corrected one:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v431/configuration/guide/policy.html#wp1138543
As per the document, the certificates should be propogated to WAE and replace the expired one. Why it did not happen in your case, I believe requires some investigation. It may be that the CM-WAE connectivity is/was broken or may be the WAE is managed by CM but is configured in such a way that CM can not update config on WAE. This could happen if you are using Device Groups and if WAE is not part of that group.
Hope this helps.
Regards.
PS: If this answers your question, please mark this as Answered.

SSL certificate expired for Google Mail

Hi there everyone, I am new here so please be gentle with me! I have had a Palm Pre on the 02 network since October and have been able to use my email fine. I use Googlemail and 02 using IMAP and today it keeps giving me error messages saying the SSL certificate has expired. I have tried turning SSL on and off, and have downloaded the software update for Palm OS but it's still not working. Is there an easy fix for this? If I change to POP will that work and how do I do that? Many thanks. Hellywobs.
This question was solved.
View Solution.

Just to say that I have solved this from another source - the date was wrong on my phone. No idea why, but now I've set the date to today, it's working again. I went to the Date and Time App and made the change. Just thought I would post here in case anyone else has the same trouble - it is an easy solution.

SSL Certificates about to expire

Please forgive what is probably a "newbie" question
The first of my OES2 servers is about to have its SSL certificates expire.
I've done the following:
- issued new certs via iManager
- namconfig -k
- namconfig restart
Here's where I get stuck..... what else do I need to do to ensure that all services are using the new certificates eg Tomcat/Apache/etc - on NetWare I simply used tckeygen and restarted these services!
I've done a google on this topic and don't find to find any single conclusive document (perhaps I need new glasses). I would appreciate it very much if the community could point me in the right direction.
Thanks in advance

Laura,
here's an article on the topic:
http://wiki.novell.com/index.php/Rec...s_on_OES_Linux
Uwe
Novell Knowledge Partner (NKP)
Please don't send me support related e-mail unless I ask you to do so.

How do i "re-trust" the SSL certificate sent from a server I previously marked as untrusted?

I use Citrix Receiver to access my workplace Windows environment remotely from home, where I run Firefox 7.01 on Ubuntu 11.10. Two days ago the SSL certificate expired, so when I tried to logon remotely it failed. Now the company have renewed the certificate, but now when I try to logon I get an error from the Citrix ICA Client saying "You have not chosen to trust Verisign Class 3 Public Primary Certification Authority - G5, the issuer of the server's security certificate (SSL error 61)"
I have found a couple of similar queries here, but neither had a solution which worked for me. The entry for Verisign Clas 3... G5 is in /etc/ca-certificates.conf, also there's a link to it in /etc/ssl/certs to an existing ...G5.crt file in /usr/share/ca-certificates - Firefox seems to recognise the issuer as a valid existing certificate issuer. Firefox displays the certificate for the page when I use menu options Tools -> Page Info -> Security -> View Certificate, and the certificate shows as valid for today - for the life of me I can't find a way to make Firefox trust the darn issuer.
I get the same fault with Firefox 3.6.23 on Ubuntu 10.04.
(I'd rather not tell everyone here the URL of my company's remote access website)

Thanks for the swift reply, cor-el - unfortunately, no joy with this approach.
A. As my named user (called "greg", surprise, surprise, no secret there...)
Run Firefox; select Edit > Preferences > Advanced : Encryption:
Here I get no option for Certificates, but I do get View Certificates - then tabs for:
- Servers, under which my company's remote logon URL is listed - Edit button is grey
- Authorities, under which the Verisign...G5 entry may be edited; 3 options:
1. may identify websites (ticked)
2. may identify mail users (unticked)
3. may identify software makers (ticked)
I ticked 2, tried again - same failure. Unticked it.
B. As root.
Run Firefox; select Edit > Preferences > Advanced : Encryption:
Here I get no option for Certificates, but I do get View Certificates - then tabs for:
- Servers, under which my company's remote logon URL is NOT listed
- Authorities, under which the Verisign...G5 entry may be edited; 3 options:
1. may identify websites (ticked)
2. may identify mail users (unticked)
3. may identify software makers (unticked)
I ticked 2 and 3, tried again - same failure. Unticked them.
Maybe a solution would be, in some way, to add my company's remote logon URL to the list of Servers while running Firefox as root. The Export and Import buttons may help here. However, when I first declined their certificate I was running Firefox as greg, not as root, so I am a bit suspicious there - what can be done as greg should be undoable as greg.
This is doing my head in. Maybe it's time to step back and think a bit. Maybe try Citrix's online help (already spent a fair amount of time there with no joy either).
So, thanks again for the reply - I've generally tried to provide a good list of what's up, and your reply has given me food for thought. OK, I'll keep trying.

SSL Ceritifacte Expired

Hi,
I am using Solaris OS 9 on Sun Blade 2000 work station. I am not able to connect my application to database on oracle 8i. It is showing SSL certificate Expired on 10 th ferbruary 2005. Kindly explain how to solve this.

Answered myself.
When the system was rebooted then the certificate changed.

Renew Verisign ssl certificate for webaccess

Hi, We have just had our current Verisign ssl certificate expire.
We are running Groupwise 7.03 - on our cluster agents and postoffices & gwia.
The webaccess application is running on a Netware 6.5 sp5 - which is running Apache ver 2.0.54 & Tomcat 4 and also has tomcat5 in the DMZ.
I have come across a number of support Tids about renewing ssl into edir, but i am looking for some steps to run through regarding WEBACCESS.
My web app team have just bought a new verisign ssl certicate.
What do i do from here to renew the webaccess application with the new Verisign ssl certificate.
Anything that can help with this regarding webaccess and verisign ssl renew certifcaite instruction steps would be helpful.
regards
Dennis

Dennis,
> My web app team have just bought a new verisign ssl certicate.
> What do i do from here to renew the webaccess application with the new
> Verisign ssl certificate.
>
> Anything that can help with this regarding webaccess and verisign ssl
> renew certifcaite instruction steps would be helpful.
If you still need to do this, drop me an email at hamish at haitch dot
net and I'll send you a doc I did documenting the process.
H.
Hamish
Run multi-processor NetWare VM's with vmBoost
http://www.haitch.net

UNIFIED MANAGER ALERT : on EXPIRING SSL certificates in clustered Data ONTAP systems

The default ssl certificates on clustered Data ONTAP systems are valid for 1 year.
Since we have cDOT clusters monitored via Oncommand Unified Manager 6.2, we would like Unified Manager to alert on expiring Certificates.
Is this possible in OCUM 6.2?
Thanks

Thanks Saravanan, Initially i had it on RHEL 6.6, and i see some of the existing packages were of a older version and created some issues while rrdtool and sql installation. but i managed to do the installation and faced the same issue. I Didnt know that this is a user account issue not a package dependency issue.and thats the reason i got my server upgraded to RHEL 7.1 and the installation went fine but the same issue. But its working for now, thanks again :-)

SSL Re-encryption with Portal and Web Dispatcher: certificate expired

Hello,
I am trying to set up HTTPS connection to the Portal through SAP Web Dispatcher. We are using SSL Re-encryption. I think I got everything set up correctly. When trying to access through a Web browser the web dispatcher trace file shows error message 'certificate expired'. Looking at the Portal (Visual admin - Keystore) I am pretty sure it is the service-ssl with localhost. It is expired. Two questions:
- is it correct that it uses localhost or am I missing anything?
- How would I recreate the certificate? (I am sure it is somewhere in the Online documentation, but haven't found it yet). Can I do this while the Portal is productive without breaking the normal access (http) to the Portal. This is our Production portal.
Thanks,
Ingrid

Hi,
Go thru the contents of SAP Note,
685306 -Enabling SSL and renewing the J2EE certificate
And also the help contents in,
http://help.sap.com/saphelp_nw04/helpdata/en/65/6a563cef658a06e10000000a11405a/content.htm
These might of some help to you !
Regards
Srinivasan T

The SSL certificate of the server is expired

Today, I accessed Beehive Online via Oracle Beehive Extentions for Explorer.
I cannot use Beehive Online with error message "The SSL certificate of the server is expired".
How should I do?

We're looking into it, meanwhile you can use a Webdav connection.
Thanks,
Jereen

Message: Your Server's SSL certificate has expired. - Can no more login

Hi,
Since yesterday I can no more login into beehiveOnline via OBEE. Every time I try it the extension goes offline and tells me in a window that "Your Server's SSL certificate has expired.". If I try to relogin it takes some seconds but the window and message comes up again and again.
It was working perfectly during the previous weeks, no issues at all. What do I have to do to get it solved?
Thanks
Volker

Hello,
I've set up OBEE for BeehiveOnLine usage today, without any issue (Monday 28 of June)
May you retry please?
Yesterday - Sunday - the system might be under maintenance.
Thanks
Fred

The Server's SSL certificate has expired

Hi,
Today morning I accessed my mails with out any problems. After some time suddenly my outlook was disconnected and getting the message "The Server's SSL certificate has expired".Can any one help me out of this?
Thanks,
Prasad K

Check if you have accidentally set your system date not to current.
Edited by: user10788046 on Oct 22, 2010 8:16 PM

Unrecognized update of expired ssl certificate

hi there
i installed open ssl to serve pages through apache using https by following this support page
http://developer.apple.com/internet/serverside/modssl.html
after a successful year, my server certificate expired. my users now get the following error message...
"xxx is a site that uses a security certificate to encrypt data during transmission, but its certificate expired.
you should check to make sure that your computer's time (currently set to xxx) is correct."
i followed the same steps again to renew the certificate, but it still produces the same error message eve after the update. i've even tried deleting any references to the old certificates from the keychain, in case there was some old pointer, but that hasn't seemed to work either.
the situation is causing my users some consternation and is cause for mistrust. how can i get the update to be recognized?

To confirm, I was able to connect to https://rumi.smarthome.cs.cmu.edu/ and saw the valid certificate.
I'm not an expert on SSL by any means, but I do believe your certificate should match the host name of the server. And as for virtual hosts, see Apache's documentation on using SSL:
http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html#vhosts
Summary: you cannot use name-based virtual hosting to host multiple SSL sites on one server. You can use different IP addresses or different ports.
Matt

SSL certificate expiration CCMS Monitoring

Similar Messages

Maybe you are looking for