Certificate Experiation alerts -ANM 4.1

[nygenxny123]

I am trying to configure  these so we get alerted via email

Under certificates i click "configure cert expiry threshhold alarms"

and that takes me to teh Alarm Notifciation Tab

but under threshold setting..i see nothing for cert experiation notification or cert experiation in general

How are these configured??

[Daniel Arrondo Ostiz]

Good morning,

To see the certificate expiration alarm options, the device type selected needs to be either "ACE VC" or "ACE 4710 VC" because this kind of alarm is done on a per-context basis.

See the attached screenshot for more details

Regards

Daniel

[nygenxny123]

thank you...

I have added each context that contains certificates

Threshold settings

ACE VC-

category-ssl cert exp (in days)

Assert on value (30)

Clear on value (31)

notify when clear -checked

severity-info

I have added the various emails accounts to be notified

I placed nothing in traps...........

however i am still not getting notified

under settings > smtp configuration>

I have added the ip address of the mail server

our mail servers use the standard port for smtp configuration.................however i am not recieving

any alerts..........we have a number of certs that are under the 30 day limit

also what is the difference between ACE 4710 VC and ACE VC

we have both the 4710's and the modular card ACE--would I need different threshold configurations for each one?

[Daniel Arrondo Ostiz]

Hi

The alarm is triggered the moment the threshold is breached, so, it will only be generated for those certificates that reach the 30 day expiration threshold after the alarm has been configured.

If you want to verify it's working, I woud recommend you to choose one certificate, configure a threshold slightly higher than that certficate's expiration days and wait until the threshold is breached to see if the notification email is sent or not.

For your other question, ACE modules and ACE appliances are handled slightly differently by ANM, so, if you are using both, you will have to create two separate thresholds.

Regards

Daniel

[nygenxny123]

Ok..i configued 3 different threshold groups

one for ACE 4710 VC

one for ACE VC

one with included both device types..ACE .4710 VC and ACE VC

all contexts were put under device selection and with an Assert on Value of 350

which would cover alot of certificates which are due to expire in a few months

still no alerts

any ideas?

[Daniel Arrondo Ostiz]

Hi,

At this point, I think the best would be to open a TAC service request to have your issue investigated further.

To troubleshoot your issue, we will for sure need to get a lifeline from the ANM, so, you can already attach it to the case from the start to save some time.

Regards

Daniel