ALM-3276800750 The CA certificate is nearly expired.

Description

PKI/4/PKICACERTNEARLYEXPIRED: OID [oid] the CA certificate is nearly expired. (APMAC=[OPAQUE], APName=[STRING], APID=[INTEGER], CACertIssuer=[issuer], CACertSubject=[subject], CACertStartTime=[starttime], CACertFinishTime=[finishtime] )

The CA certificate is about to expire.

Attribute

AlarmID	Alarm Severity	Alarm Type
3276800750	Warning	Quality of service alarm

Parameters

Name	Meaning
oid	Indicates the MIB object ID of the alarm.
APMAC	MAC address of an AP.
APName	AP name.
APID	AP ID.
CACertIssuer	Indicates the issuer of the CA certificate.
CACertSubject	Indicates the subject of the CA certificate.
CACertStartTime	Indicates the start time of the CA certificate.
CACertFinishTime	Indicates the end time of the CA certificate.

Impact on the System

The service will be invalid after the certificate expires.

Possible Causes

The CA certificate is about to expire. The CA certificate expiration time is less than the certificate expired prewarning time configured by the pki set-certificate expire-prewarning command.

Procedure

Run the display clock command to check whether the device time is correct.
If not, run the clock datetime command in the user view to change the device time.
Apply for a new certificate through SCEP or CMPv2 online or apply for a new certificate offline.

Parent topic: WAC&AP Alarms

Previous topic: ALM-303046424 The SIPFPM flow table on the AC reaches the upper limit

Next topic: ALM-3276801006 The local certificate is nearly expired