Operational Defect Database
BugZero found this defect 461 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
Hewlett Packard Enterprise | a00129965en_us
Advisory: HPE OneView - An Alert Message, "Symantec Class 3 Secure Server SHA256 SSL CA Is About to Expire" May Be Displayed
Last update date:
2/19/2024
Affected products:
HPE OneView
Affected releases:
No affected releases provided.
Fixed releases:
No fixed releases provided.
Description:
Info
HPE OneView appliances that were initially installed with OneView version 4.0 or earlier may display a locked alert indicating the CA certificate with alias name Symantec Class 3 Secure Server SHA256 SSL CA is about to expire: The Remote Support certificates used for communication with HPE Data Center for Remote Support were changed in November 2018. OneView Version 4.00.09 for Remote Support was the first release that included and used the new certificates. Appliances installed with earlier releases may still contain the original certificates. During other OneView upgrades, the original certificates were not automatically deleted, in case any certificates imported onto the systems managed or monitored by OneView were issued with them. However, if these old certificates from version 4.0 or earlier are present, they will expire. Two of the four certificates are due to expire in 2023, the first on April 8th, one other in October 2023. When these certificates are present, OneView will display the locked alert indicating they are about to expire.
Scope
Any HPE OneView originally installed with OneView 4.0 or earlier.
Resolution
The old Remote Support certificates installed with OneView version 4.0 or earlier should be removed as described in the Customer Notice a00067457en_us published in March 2019. If the certificate with alias name, Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4 that expires October 2023 is not deleted, a similar alert will be displayed for this certificate in August 2023. RECEIVE PROACTIVE UPDATES : Receive support alerts (such as Customer Advisories), as well as updates on drivers, software, firmware, and customer replaceable components, proactively in your e-mail through HPE Support Alerts.Sign up for Support Alerts at the following URL: HPE Email Preference Center NAVIGATION TIP: For hints on navigating HPE.com to locate the latest drivers, patches and other support software downloads, refer to the Navigation Tips document. SEARCH TIP: For hints on locating similar documents on HPE.com, refer to the Search Tips document.
