×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?
6

the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)
the alarm says:
TLS certificate is due to expire
Type: trusted store certificate
days remaining:60

did this happen to everyone?
I tried to renew certs on web page(:7071) and in security in manager, but it still shows up.

(they are all powered by Avaya hosted- r10, 10.1, 11)

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Did you check the certificate? Is it provided by Avaya? They should renew it themselves.

IP Office remote service https://www.fwilke.com/home
Fixed price SIP trunk configuration: https://www.fwilke.com/en/ip-office-sip-trunk-en/
CLI based cale blocking: https://blog.fwilke.com/ip-office-block-calls-from...
SCN fallback over PSTN: https://blog.fwilke.com/ip-office-scn-fallback/

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)
it isn't just hosted, I made a mistake. I have started checking our other systems and see it on regular ip 500's also that are rel 10 or higher, but rel 9's don't have the issue?

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Which certificate?

My IPO self-signed are valid until 2026.

"Trying is the first step to failure..." - Homer

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)
can I just delete it? will it renew automatically?

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

The IPO certificate (ipo1074695) will be created newly if you delete it. You should check if it is self signed or created by verisign by clicking 'view' in the upper area.

If it created by verisign, you should let them issue a new one.

IP Office remote service https://www.fwilke.com/home
Fixed price SIP trunk configuration: https://www.fwilke.com/en/ip-office-sip-trunk-en/
CLI based cale blocking: https://blog.fwilke.com/ip-office-block-calls-from...
SCN fallback over PSTN: https://blog.fwilke.com/ip-office-scn-fallback/

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

You need to create a new certificate through Platform View so it gets updated on all services.

"Trying is the first step to failure..." - Homer

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)
I went to platform view, deleted the VeriSign cert, rebooted server and it same cert came right back with same date to expire?

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Just had the same issue on my 2 server and expansion today. Realease 11.0.0.1
My colleague has the same on Ipo office release 11.0.4

Expires in 60 days...what’s going on.

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

We had the same thing happen a few years back where all the R9.1 and older systems were having expiring certificates on the same day. I know in that case it was because the system was expecting to connect a sntp server on first boot, which is rare, and if it didnt it would default to Jan 2010 and then create a 7 year certificate making it expire end of 2017. We got a lot of calls in January 2018 on this issue.

My guess is that something similar is happening here if a lot of people got 60 days remaining on the same day.

The truth is just an excuse for lack of imagination.

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

I've seen the same today, too. It's not possible to delete the certificate. You just only can ignore this warning. No certificates generated by this CA should be used anymore.

IP Office remote service https://www.fwilke.com/home
Fixed price SIP trunk configuration: https://www.fwilke.com/en/ip-office-sip-trunk-en/
CLI based cale blocking: https://blog.fwilke.com/ip-office-block-calls-from...
SCN fallback over PSTN: https://blog.fwilke.com/ip-office-scn-fallback/

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Oh... Probably all phones with system phone rights will show the warning as well. So if necessary remove that rights.

IP Office remote service https://www.fwilke.com/home
Fixed price SIP trunk configuration: https://www.fwilke.com/en/ip-office-sip-trunk-en/
CLI based cale blocking: https://blog.fwilke.com/ip-office-block-calls-from...
SCN fallback over PSTN: https://blog.fwilke.com/ip-office-scn-fallback/

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

(OP)
I went into platform view :7070 like janni78 mentioned and deleted the expiring cert and alarm went away for the server edition, to fix the ip 500 units I used port :8443

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

It's an Intermediate CA that expires Feb 7 2020.
Seems this is used if the IP Office is connected to Avaya Support.

A VeriSign intermediate certificate authority owned by Avaya.
Trusts the Avaya SSLVPN server and on-boarding files used for
the Avaya IP Office Support Services (IPOSS).
Required for IP Office registration and connection to IPOSS.

"Trying is the first step to failure..." - Homer

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Deleting the certificate via WebManagement does indeed solve the issue - temporarily...
After the next system reboot the certificate reappears and so does the error message.

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

I guess Avaya will fix it in a later release, but it shouldn't affect anything if it expires.

"Trying is the first step to failure..." - Homer

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Nice of Avaya to have the fix, but it doesn't work. I have deleted the certificate from 3 IP500V2 IPOs running r11+ with no change I still see the error in SSA.
Mike

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

3
Found a trick that does work. You can only do this if you are on site. The embedded file management won't load the certificate. Gives a 403 error. Forbidden.

Download the certificate with web manager.
Pull the SD card out of the IPO and put it in your PC.
Copy the certificate to the system/primary/certificates/tcs/delete
Reboot

From the readme.txt in that folder.

This folder contains certificates that should be automatically deleted from the IPOFFICE
Trusted Certificate Store. The system can interpret both PEM and DER encodings. The
certificate file name extension must indicate the type of encoding. PEM encoded files
should end with .pem and DER encoded files should end with .der.

When the IPOFFICE boots, the system will check if there are any certificates that exactly match
a certificate in the TCS (byte for byte). If a matching certificate is found in the TCS,
it will then be removed.

Or you can ignore the SSA error. thumbsup

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Pink for that solution. Not something I would of ever thought of trying and sad it takes going to that length to fix Avaya's blunder and even more sad that once more a tech figures it out long before Avaya does.

The truth is just an excuse for lack of imagination.

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Sad part is the trick can't be done remotely. We support systems all across the US and in five other countries, so ignoring the alarm is our best solution. thumbsup2 Thanks Avaya.

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Ya it is true a remote option would be great but something is better then nothing. The fact that the certificate is not used (supposedly) anymore is the only saving grace at this point. I appreciate you taking the time to find a solution though.

The truth is just an excuse for lack of imagination.

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

I didn't test it myself but I think it could be possible on server edition servers to move the license file within the Linux file system.

IP Office remote service https://www.fwilke.com/home
Fixed price SIP trunk configuration: https://www.fwilke.com/en/ip-office-sip-trunk-en/
CLI based cale blocking: https://blog.fwilke.com/ip-office-block-calls-from...
SCN fallback over PSTN: https://blog.fwilke.com/ip-office-scn-fallback/

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

You can upload this file using Web Manager you still will need to reboot system after. This will save you time other than removing the SD card. If you have remote you don't even have to leave your office

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

Thank you Magixman. I hadn't tried from Web Manager. I wonder why it won't let you do it from Manager. Seems stupid. But at least it works.

Dermis and feline can be divorced by manifold methods.*
*(Disclaimer for all advise given)--'Version Dependent'

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

When i try to upload the certificate via web manager, we are getting error that the file is not in .wav format?
Anyone else experience this issue?

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

i have 20 systems having certificates expiring this Friday they are all on V11 has anyone had a solution this issue i need help ASAP

RE: the alarm: TLS cert is about to expire showed up on all our hosted avaya server today?

@Gaspagano:
According to Avaya nothing bad will happen once the certificate expires (asked an Avaya representative at an event last week, the reason being that the certificate isn't used any more anyways)

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close