Using prognosis to manage certificate expiry

[Jonathan_Mc]

Hi,

is it possible to use prognosis to check certificate expiry dates on CM/SMGR etc?

[Martin_Smith]

Hi Jonathan,

Am happy to research this - I have recently had queries regarding Cert warnings/alerts in Cisco and SfB environments, but can I just clarify - what/where are these Certificates used, i.e. context ?

BR,
ms.

[Cedric_Jackson]

I too am interested in this topic. My certs are on Avaya Experience Portal, Tomcat Application Servers and other places. I would like to read the expiration date and send out a notice.

[ChristopherS]

I took a quick look at our Web Server related records (i.e. J2EE) and at least for those examples didn't see where we are 'currently' doing this.. ...However I've played around a bit and think build a consulting solution to do this seems absolutely possible via possibly a couple different ways.

What key metrics would you be looking for in particular to be part of such a record?
Are you just looking for like the name and expirey and what are the different source and platforms specifically would you be interested in?
Is there by chance any logs for any of these sources already that might give warnings or even an informational message on application startup?

Christopher

[Cedric_Jackson]

Thanks for the feedback Christoper.

I am looking for Common Name / Signature Algorithm, & Expiry Date

Currently, I get notifications when the cert has failed.

[ChristopherS]

Thanks.. I'm not a UC guy but it seems relatively straight forward for IIS (WMI) & Apache (Keytool).

The rest CM/SMGR, Cisco, SfB, and Avaya Experience Portal mentioned in this thread I'd need some more details.

Though I believe Shoaib mentioned in another post on a similar topic if we can aggregate the different sources we could definitely build something.

Christopher

[Shoaib_Dilawar]

Cedric,

from most of the windows boxes, we can remotely run Get-CsCertificate powershell command and get things like:

PSComputerName : xxx.xx.local
RunspaceId : 27f2fd9a-3afd-4d87-b152-8d8fd6be95a6
PSShowComputerName : True
Issuer : CN=xx-xx-CA, DC=xx, DC=local
NotAfter : 9/22/2018 2:06:44 PM
NotBefore : 9/22/2017 1:56:44 PM
SerialNumber :xx
Subject : CN=xx, OU=Denver, O=IR, L=xx, S=CO, C=US
AlternativeNames : {}
Thumbprint : 63E2CCC6AFC294A01363268936452607F2262F95
EffectiveDate : 9/22/2017 2:10:01 PM
PreviousThumbprint :
UpdateTime :
SourceScope : Global
Use : OAuthTokenIssuer