certificate error won't clear 1

[azrael2000]

Hi All.
I tried clearing my alarm using the Avaya document below

https://support.avaya.com/ext/index?page=content&id=SOLN312079&group=UG_ENTITLED_CUSTOMER

But in system status I still see the error in alarms.
And my certificate expires in 2023... not the 7 years they say.
Is that normal?

Or is there something different in R11.1 that you have to do for the certificate regeneration?

Regards

 

[John563]

The error you are seeing probably has nothing to do with the identity cert. It's probably related to one of the trusted certificate store certs. Does the error say Type: trusted store certificate? It's generally safe to delete the expired and expiring trusted certs that Avaya included by default, but IPO will automatically add them back in. The only way I know of to permanently delete them is to update to a version that no longer contains them. You can probably ignore the error.

 

[NYSTECH]

Look at the Lets Encryt cert. I bet that's the one throwing the alarm. You will need to place it in the delete folder of the certificates and reboot to clear alarm.

 

[azrael2000]

Hi John.

Yes I put the file into the trusted store.
I see it there and confirmed it is for 7 years (why I saw 3 before I really don't know).
But when I opened the configuration it didn't throw the error .... yet

 

[John563]

Ah thanks NYSTECH! I had no idea about the /system/Primary/certificates/TCS/DELETE folder.

 

[azrael2000]

What the Lets Encry certificate?
Where is it hiding and how do I move it?
Other than the obvious File -> Embedded File Management track.

Regards

 

[John563]

In security settings > Certificates > trusted certificate store you should see Let's Encrypt Authority X3. Based on what NYSTECH was referring to, I think you can select this cert > view > details > copy to file. Then through embedded file management, upload it to the DELETE folder to permanently delete it.

 

[NYSTECH]

See if this helps, look under certificates in security settings.

Was trying to upload the PDF from Avaya but doesn't look like I can attach it

It is on Avaya Knowledge base - Doc ID: SOLN356197 IP Office: Let's Encrypt Certificate Expired in 11.x

Just FYI. I was able to clear it on the SE with Web manager but have not been able to clear it on a IP500 with Web manager. I had to remove the SD card and add it manually.

 

[tac84]

Hi
I just had this same problem and the resolution is to download the Let's encrypt certificate which you can download from this link:

https://support.avaya.com/public/do.../356000/SOLN356197/en_US/Lets Encryt Cert.zip

Unzip the file, then follow the instructions above from @NYSTECH re placing the certificate in the 'Delete' folder located in /System/Primary/Certificates/TCS/DELETE folder. Once it's in there reboot and the error will go.

Thanks, Tim
Adelaide, Australia