Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

the alarm: TLS cert is about to expire showed up on all our hosted avaya server today? 7

Status
Not open for further replies.

nothingworks101

Programmer
Aug 14, 2008
239
US
the alarm says:
TLS certificate is due to expire
Type: trusted store certificate
days remaining:60

did this happen to everyone?
I tried to renew certs on web page:)7071) and in security in manager, but it still shows up.

(they are all powered by Avaya hosted- r10, 10.1, 11)
 
Nice of Avaya to have the fix, but it doesn't work. I have deleted the certificate from 3 IP500V2 IPOs running r11+ with no change I still see the error in SSA.
Mike
 
Found a trick that does work. You can only do this if you are on site. The embedded file management won't load the certificate. Gives a 403 error. Forbidden.

Download the certificate with web manager.
Pull the SD card out of the IPO and put it in your PC.
Copy the certificate to the system/primary/certificates/tcs/delete
Reboot

From the readme.txt in that folder.

This folder contains certificates that should be automatically deleted from the IPOFFICE
Trusted Certificate Store. The system can interpret both PEM and DER encodings. The
certificate file name extension must indicate the type of encoding. PEM encoded files
should end with .pem and DER encoded files should end with .der.

When the IPOFFICE boots, the system will check if there are any certificates that exactly match
a certificate in the TCS (byte for byte). If a matching certificate is found in the TCS,
it will then be removed.

Or you can ignore the SSA error. [thumbsup]

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'
 
Pink for that solution. Not something I would of ever thought of trying and sad it takes going to that length to fix Avaya's blunder and even more sad that once more a tech figures it out long before Avaya does.

The truth is just an excuse for lack of imagination.
 
Sad part is the trick can't be done remotely. We support systems all across the US and in five other countries, so ignoring the alarm is our best solution. [thumbsup2] Thanks Avaya.

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'
 
Ya it is true a remote option would be great but something is better then nothing. The fact that the certificate is not used (supposedly) anymore is the only saving grace at this point. I appreciate you taking the time to find a solution though.

The truth is just an excuse for lack of imagination.
 
I didn't test it myself but I think it could be possible on server edition servers to move the license file within the Linux file system.

IP Office remote service Fixed price SIP trunk configuration: CLI based cale blocking: SCN fallback over PSTN:
 
You can upload this file using Web Manager you still will need to reboot system after. This will save you time other than removing the SD card. If you have remote you don't even have to leave your office
Web_y1rest.png
 
Thank you Magixman. I hadn't tried from Web Manager. I wonder why it won't let you do it from Manager. Seems stupid. But at least it works.

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'
 
When i try to upload the certificate via web manager, we are getting error that the file is not in .wav format?
Anyone else experience this issue?
 
i have 20 systems having certificates expiring this Friday they are all on V11 has anyone had a solution this issue i need help ASAP
 
@Gaspagano:
According to Avaya nothing bad will happen once the certificate expires (asked an Avaya representative at an event last week, the reason being that the certificate isn't used any more anyways)
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top