Configure Device Certificate Expiry Time

You can configure alerts for a TLS certificate expiration.

About this task

Follow this procedure to configure alerts for a TLS certificate expiration in SLX.

The configuration enables SLX to send the alerts via RASLOG and SNMP traps. You can configure the following severity level along with the time period:

Critical
Major
Minor
Info

The time period for generating SNMP traps corresponds to the input time in days before certificate expiry. The input range is from 1 to 90 days, with a 0 value used to de-configure.

Procedure

To configure the device certificates expiry time, run the following command:

efa inventory device setting update --crypto-cert-expiry-info 
efa inventory device setting update --crypto-cert-expiry-minor 
efa inventory device setting update --crypto-cert-expiry-major 
efa inventory device setting update --crypto-cert-expiry-critical

Note

For information about commands and supported parameters to see ExtremeCloud Orchestrator Command Reference, 3.5.0 .

Table 1. Drift Reconcile and Idempotency Support
Identify Drift	Reconcile Configuration	Idempotency
Yes	Yes	Yes

Example

efa inventory device setting update --ip 10.20.24.10,10.20.24.12 --crypto-cert-expiry-info 50
+---------------+--------------------------------+---------+-------+-------+
|  IP ADDRESS   |              NAME              | STATUS  | VALUE | ERROR |
+---------------+--------------------------------+---------+-------+-------+
| 10.20.24.10   | Crypto Cert Expiry Info        | Success |  50   |       |
+---------------+--------------------------------+---------+-------+-------+
 
efa inventory device setting update --ip 10.20.24.10,10.20.24.12 --crypto-cert-expiry-minor 30
+---------------+--------------------------------+---------+-------+-------+
|  IP ADDRESS   |              NAME              | STATUS  | VALUE | ERROR |
+---------------+--------------------------------+---------+-------+-------+
| 10.20.24.10   | Crypto Cert Expiry Minor       | Success |  30   |       |
+---------------+--------------------------------+---------+-------+-------+
 
efa inventory device setting update --ip 10.20.24.10,10.20.24.12 --crypto-cert-expiry-major 10
+---------------+--------------------------------+---------+-------+-------+
|  IP ADDRESS   |              NAME              | STATUS  | VALUE | ERROR |
+---------------+--------------------------------+---------+-------+-------+
| 10.20.24.10   | Crypto Cert Expiry Major       | Success |  10   |       |
+---------------+--------------------------------+---------+-------+-------+
 
efa inventory device setting update --ip 10.20.24.10,10.20.24.12 --crypto-cert-expiry-critical 5
+---------------+--------------------------------+---------+-------+-------+
|  IP ADDRESS   |              NAME              | STATUS  | VALUE | ERROR |
+---------------+--------------------------------+---------+-------+-------+
| 10.20.24.10   | Crypto Cert Expiry Critical    | Success |   5   |       |
+---------------+--------------------------------+---------+-------+-------+