Expiration Check for Private Certificates

Rule Details

**Table 1** Rule details
Parameter	Description
Rule Name	pca-certificate-expiration-check
Identifier	Expiration Check for Private Certificates
Description	If the validity period of a private certificate is not within the specified range, this certificate is non-compliant.
Tag	pca
Trigger Type	Periodic
Filter Type	pca.cert
Rule Parameters	daysToExpiration: indicates a validity period. This is an integer type parameter.

Application Scenarios

Private certificates are deployed on service nodes and are frequently used for encrypted communication. To prevent private key leakage, the validity period of private certificates is set based on the security level requirements of service scenarios. If a private certificate expires, service communication will be interrupted.

Solution

Rotate your private certificate, or renew the private certificate in the Billing Center.

Rule Logic

If a private certificate will expire within the specified period, this policy is non-compliant.
If a private certificate will not expire within the specified period, this policy is compliant.

Parent topic: Cloud Certificate Manager

Previous topic: Expiration Check for Private CAs

Next topic: Private Root CAs Are Disabled