Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

certificate error won't clear 1

Status
Not open for further replies.

azrael2000

Technical User
Jun 10, 2008
982
CA
Hi All.
I tried clearing my alarm using the Avaya document below


But in system status I still see the error in alarms.
And my certificate expires in 2023... not the 7 years they say.
Is that normal?

Or is there something different in R11.1 that you have to do for the certificate regeneration?

Regards
 
The error you are seeing probably has nothing to do with the identity cert. It's probably related to one of the trusted certificate store certs. Does the error say Type: trusted store certificate? It's generally safe to delete the expired and expiring trusted certs that Avaya included by default, but IPO will automatically add them back in. The only way I know of to permanently delete them is to update to a version that no longer contains them. You can probably ignore the error.
 
Look at the Lets Encryt cert. I bet that's the one throwing the alarm. You will need to place it in the delete folder of the certificates and reboot to clear alarm.

 
Hi John.

Yes I put the file into the trusted store.
I see it there and confirmed it is for 7 years (why I saw 3 before I really don't know).
But when I opened the configuration it didn't throw the error .... yet

 
Ah thanks NYSTECH! I had no idea about the /system/Primary/certificates/TCS/DELETE folder.
 
What the Lets Encry certificate?
Where is it hiding and how do I move it?
Other than the obvious File -> Embedded File Management track.

Regards
 
In security settings > Certificates > trusted certificate store you should see Let's Encrypt Authority X3. Based on what NYSTECH was referring to, I think you can select this cert > view > details > copy to file. Then through embedded file management, upload it to the DELETE folder to permanently delete it.
 
See if this helps, look under certificates in security settings.

Was trying to upload the PDF from Avaya but doesn't look like I can attach it

It is on Avaya Knowledge base - Doc ID: SOLN356197 IP Office: Let's Encrypt Certificate Expired in 11.x

Just FYI. I was able to clear it on the SE with Web manager but have not been able to clear it on a IP500 with Web manager. I had to remove the SD card and add it manually.
 
Hi
I just had this same problem and the resolution is to download the Let's encrypt certificate which you can download from this link:

Unzip the file, then follow the instructions above from @NYSTECH re placing the certificate in the 'Delete' folder located in /System/Primary/Certificates/TCS/DELETE folder. Once it's in there reboot and the error will go.

Thanks, Tim
Adelaide, Australia
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top