cert
• Displays certificate issues
• Reports SSL certificates that have expired, will expire in less than 30 days, and certificates that will not
be valid until a future date
Format of possible
cert
exception messages
cert -- "Certificate <DNSname> for Service:<servicename> will expire in <count> days"
cert -- "Certificate <DNSname> for Service:<servicename> expired on <date&time>"
cert -- "Certificate <DNSname> for Service:<servicename> not valid until <date&time>"
cert
example
cli%
checkhealth -detail cert
Checking cert
Component -----Summary Description------ Qty
cert Certificates that have expired 1
Component -Identifier- -----------------------------Detailed Description----------------------------
cert -- Certificate example.com for Service:wsapi expired on Jul 20 22:36:26 2014 GMT
cert
suggested action
Use the CLI
showcert
command to display the current SSL certificates. Use the CLI
removecert
command to remove the expired SSL certificate and the CLI
createcert
command to create an SSL
certificate with a valid date range.
dar
Checks for issues with data encryption.
Format of possible
dar
exception messages
DAR -- "DAR Encryption status is unavailable"
DAR -- "DAR Encryption is enabled but not licensed"
DAR -- "DAR Encryption key needs backup"
DAR -- "There are <number> disks that are not Self Encrypting"
DAR -- "DAR Encryption status: <dar state>"
DAR -- "DAR EKM status is: <EKM status
dar
example 1
DAR -- "There are 5 disks that are not self-encrypting"
dar
suggested action 1
Remove the drives that are not self-encrypting from the system because the nonencrypted drives cannot
be admitted into a system that is running with data encryption. Also, if the system is not yet enabled for
data encryption, the presence of these drives prevents data encryption from being enabled.
dar
example 2
Dar -- "DAR Encryption key needs backup"
dar
suggested action 2
Issue the
controlencryption backup
command to generate a password-enabled backup file.
dar
example 3
Troubleshooting
145