Renew HTTPS Certificates for SLX

About this task

During device registration, HTTPS certificates are generated and pushed to SLX. These HTTPS certificates have an expiry of two years.

The device shows the following error message when an HTTP certificate expires:

1022 AUDIT, 2025/06/24-17:20:52 (GMT), [SEC-3112], INFO, SECURITY, admin/admin/127.0.0.1/http/REST Interface,, SLX, Event: X509v3, Certificate Validation failed, Info: Reason = certificate has expired,
Certificate Details = [Subject CN efa.extremenetworks.com,
Serial 16193545342960822577 Issuer /C=US/ST=CA/O=Extreme Networks/OU=Extreme Fabric Automation Intermediate/CN=EFA Intermediate CA/emailAddress=support@extremenetworks.com].

Procedure

Regenerate the HTTPS certificate using the following API for each device:

(efa:extreme)extreme@tpvm:~$ efa certificate device install --ip=10.x.x.x --cert-type=https
WARNING: This will restart the HTTP service on the devices and services will not be able to connect till the operation is complete. Do you want to proceed [y/n]?
y
+-------------+---------+
| IP Address  | Status  |
+-------------+---------+
| 10.x.x.x    | Success |
+-------------+---------+
--- Time Elapsed: 53.86635094s ---