Home
Оборудование Cisco Беспроводные сети Компьютерная телефония IP-Телефония Оборудование Avaya Оборудование Alcatel Оборудование TELiNDUS Сервера Dell Оборудование СКС SYSTIMAX Учебный центр Конференция
Новости
О компании
Дистрибуция
Учебный центр
Для партнеров
Online-конференции
Техподдержка
Online-конференции
Список форумов
Новое сообщение
Выборка за период
Правила конференций
Архивы конференций
Часто задаваемые вопросы
Информация
- новое сообщение
- старое сообщение
Всего сообщений - 89514
 
Конференции
Конференции

Телефонные станции Definity
Тема: Re: сертификат SMGR
 Александр Пехотинский   [18 Jun 2020 14:23:54] Ответить

Там похоже что-то не особо относящееся к вашей проблеме:

Details
System Manager 6.x , 7.x and higher version.

Problem Clarification
(Alarm Name) : avAuraSysMgrTMUICertExpire , (Alarm String) : 11/20:51,ACT| avAuraSysMgrTMUICertExpire,RR-me-sm,10.10.4.12,websphere,TMA000056E,Certificate about to expire on remote element,MAJ
(Alarm Name) : avAuraSysMgrTMUICertExpire , (Alarm String) : 18/13:33,ACT|avAuraSysMgrTMUICertExpire,System
spiritalias,TMA000056E,Certificate about to expire on remote element

This alarm is valid in 6.2.x, may also appear in System Manager 6.3.x, and those that have been upgraded from earlier versions that are deploying Avaya Demo Certificates, or have had Demo Certificates added using the CertificateRenewalUtility_v2.bin, or loaded otherwise from the Session Managers.

Starting from Session Manager / System Manager 6.2 release, "Certificate about to expire on Remote Element " alarm (EventID: TMA000056E) alarms will be generated on System Manager web page Events --> Alarms.
This was not available in prior releases.
Certificate renewal alarm TMA000056E generated for Session Manager
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

Example Logs: On some instances of SMGR version 6.3.7, the auto-renewal is not working although System Manager tries to renew successfully the ASM certificates:
/var/log/Avaya/mgmt/tm/tmAuditLog.log
<107>Mar 18 14:20:43 sydavasmgr01]: +11:00 2016 032 1 com.avaya.mgmt | 1 com.avaya.mgmt.trust.logging TMA000056E Certificate about to expire on remote element. Element Name : sydavasm02, Host : x.x.x.x, Certificate alias : mgmt
<110>Mar 18 14:20:43 sydavasmgr01]: +11:00 2016 274 1 com.avaya.mgmt | 0 Required access point found. Name = Session Manager TM Type = TrustManagement Protocol = jnpPort = 1299
<107>Mar 18 14:20:43 sydavasmgr01]: +11:00 2016 277 1 com.avaya.mgmt | 1 com.avaya.mgmt.trust.logging TMA000056E Certificate about to expire on remote element. Element Name : sydavasm02, Host : x.x.x.x, Certificate alias : websphere
<110>Mar 18 14:20:43 sydavasmgr01]: +11:00 2016 526 1 com.avaya.mgmt | 0 Required access point found. Name = Session Manager TM Type = TrustManagement Protocol = jnpPort = 1299
<107>Mar 18 14:20:43 sydavasmgr01]: +11:00 2016 528 1 com.avaya.mgmt | 1 com.avaya.mgmt.trust.logging TMA000056E Certificate about to expire on remote element. Element Name : sydavasm02, Host : x.x.x.x, Certificate alias : spiritalias

<110>Mar 18 14:26:46 sydavasmgr01: +11:00 2016 926 1 com.avaya.mgmt | 0 Renewing - spiritalias 2094145886 SPIRIT
<110>Mar 18 14:26:46 sydavasmgr01: +11:00 2016 930 1 com.avaya.mgmt | 0 Renewing certificate with CN=avaya.spirit.agent, key size=1024, key algorithm=RSA
<110>Mar 18 14:26:47 sydavasmgr01]: +11:00 2016 625 1 com.avaya.mgmt | 1 com.avaya.mgmt.trust.logging AUDTM004 Replace Signer Certificate
<110>Mar 18 14:26:47 sydavasmgr01]: +11:00 2016 628 1 com.avaya.mgmt | 0 Successfully renewed certificate : C=US, O=Avaya, CN=avaya.spirit.agent
<110>Mar 18 14:26:47 sydavasmgr01: +11:00 2016 631 1 com.avaya.mgmt | 0 Renewed - spiritalias 2094145886 SPIRIT
<110>Mar 18 14:27:34 sydavasmgr01: +11:00 2016 259 1 com.avaya.mgmt | 0 Renewing - websphere 1943824649 WebSphere
<110>Mar 18 14:27:34 sydavasmgr01: +11:00 2016 263 1 com.avaya.mgmt | 0 Renewing certificate with CN=xyz.ab, key size=1024, key algorithm=RSA
<110>Mar 18 14:27:34 sydavasmgr01]: +11:00 2016 764 1 com.avaya.mgmt | 1 com.avaya.mgmt.trust.logging AUDTM004 Replace Signer Certificate
<110>Mar 18 14:27:34 sydavasmgr01]: +11:00 2016 767 1 com.avaya.mgmt | 0 Successfully renewed certificate : C=US, O=Avaya, CN=xyz.ab
<110>Mar 18 14:27:34 sydavasmgr01: +11:00 2016 770 1 com.avaya.mgmt | 0 Renewed - websphere 1943824649 WebSphere
<110>Mar 18 14:27:55 sydavasmgr01: +11:00 2016 857 1 com.avaya.mgmt | 0 Renewing - mgmt 174960651 Management
<110>Mar 18 14:27:55 sydavasmgr01: +11:00 2016 861 1 com.avaya.mgmt | 0 Renewing certificate with CN=xyz.ab, key size=1024, key algorithm=RSA

Issues with Auto-Renew of certificates.


Cause
Product is functioning as its designed.

This is a warning message as indication for the certificate expiry.

The warning occurs 60 days prior to expiry

Solution
An alarm is raised on the System Manager web page --> Events --> Alarms page, if any of the Session Manager certificates are about to expire. Typically 60 days prior to expiration.
Refer to the PSN3909 https://downloads.avaya.com/css/P8/documents/100169323 for Session Manager 6.2 release to fix (Only if the certificates are not yet expired)

As mentioned in the PSN, this is NOT Service Affecting.


If the Session Manager was upgraded from the previous releases (6.0, 5.2 etc), then the SM instance in :
System Manager Web page --> Inventory --> Managed Elements
The SM instances are automatically added if the system was newly installed. In this case, if you find the SM Instances are not available in the Managed Elements page then we can manually add it.

Press the "New" button and Select the "Type" as Session Manager from the drop down menu.
Enter the Session Manager hostname as the given Name and Session Manager's Management IP address in the Node field.
In "Access Point" field, select "Session Manager" and click on Edit. Type the Session Manager Management IP address in the "Host" field leaving all other fields unchanged. Press Save button on "Access Point Details" and click on Commit.
Perform the above steps from 1 to 3 for all of the available Session Managers. This is NOT Service Affecting. After completing this, follow the PSN given above.
Please Note: The latest Service Patch for your release resolves the majority of issues preventing auto-renewal.
Additional Note: If the ASM Element is not showing managed by SMGR the ASM may need to be rebooted so that it can accept and activate the new certificates. Run the Session Manager validate can also confirm the certificate status.

1.) Deny New Service on the relevant ASM on the SMGR GUI
2.) Reboot the ASM via the SMGR GUI
3.) If necessary Allow New Service after the ASM comes back up from the reboot.

Check below PSN.

https://support.avaya.com/css/P8/documents/100159923

For System Manager Alarm- Certificate about to expire on remote element, please Run the Certificateutility.bin to renew the expired certificate.

Certificateutility.bin Script will renew all the certificate.



To renew your certificates on ASM 6.3.x

1. Access the session manager CLI VIA the cust account.

2. Ensure that you are ready to have service down on that session manager for ~10 to 15 minutes.

3. Run the following command: initTM -f (if any 3rd party certifiates installed, after the command, 3rd party cert need reload, so dont need run initTM -f, but just restart the application like in CLI of session manager restart -all )

4. After the command is completed, verify certificates have updated on SMGR through

Inventory>Manage Elements>[SM]>View Identity Certificates

Attachment Description
Run Certificate renewable utility downloaded from Support.avaya.com

  Ответить
ТемаАвторОтветовПоследний ответ
сертификат SMGR  unou  29 May 2020 13:32
   Re: сертификат SMGR  Виктор  01 Jun 2020 09:15
      Re: сертификат SMGR  unou  01 Jun 2020 11:51
         Re: сертификат SMGR  Александр Пехотинский  01 Jun 2020 12:56
            Re: сертификат SMGR  Сергей  01 Jun 2020 15:28
               Re: сертификат SMGR  Александр Пехотинский  01 Jun 2020 16:51
                  Re: сертификат SMGR  unou  01 Jun 2020 17:10
                     Re: сертификат SMGR  Сергей  18 Jun 2020 13:44
                        Re: сертификат SMGR  Сергей  18 Jun 2020 14:12
                           Re: сертификат SMGR  Александр Пехотинский  18 Jun 2020 14:23
                           Re: сертификат SMGR  Александр Пехотинский  18 Jun 2020 14:26
                              Re: сертификат SMGR  Сергей  18 Jun 2020 14:46
                                 Re: сертификат SMGR  Сергей  18 Jun 2020 14:47
                                    Re: сертификат SMGR  Сергей  18 Jun 2020 15:11
                                       Re: сертификат SMGR  Александр Пехотинский  18 Jun 2020 16:13
                                          Re: сертификат SMGR  Сергей  19 Jun 2020 06:52
                                             Re: сертификат SMGR  Александр Пехотинский  19 Jun 2020 10:19
                                                Re: сертификат SMGR  Сергей  19 Jun 2020 11:35