Does prognosis capture cisco expressway certificate expiry?

[kashyap]

Hello All,

can prognosis capture cisco expressway certificate expiry?

we have recieveing alerts related expressway but none of them related to certificate expiry.

I want to know if prognosis can capture alerts for certificate expiry, if yes what is the threshold condition required?.

Thanks,

Kashyap

[SCOTT_BALDWIN · Accepted solution]

Hello @kashyap,

Prognosis does not currently gather Expressway Certificate expiry dates. Development has been discussing this feature, but it is not yet in product and the date for adding this feature has not yet been set.

Option to add this feature into Prognosis:

Please contact your Account Manager to discuss the process to request the feature be added to core Prognosis or to investigate how to add this feature to Prognosis now with an Extended Solution from Professional Services.

Thank you,
Scott Baldwin

[JMcCann]

Scott,

Is this still currently the case with Expressway certificate expiry?  The confusion on my part is that the certficate status, along with its current expiry date information is displayed in the Web client.  It would seem logical that if it can be displayed it can be alerted against.  See attached .png

[SCOTT_BALDWIN]

Hi @JMcCann,

You are correct. Prognosis 12.1 added Expressway certificate monitoring.

Cisco certificate information is stored in Prognosis record CallManagerApplianceCertificates (CMACERTS).
The expiry date of the certificate is stored in the NOTAFTER field.

The IptDeviceTh Threshold included with 12.1 is designed to alert when a cert will expire in 60 days using the following conditions. Note: these Conditions are disabled by default:

• ExpresswayCertAboutToExp
• ExpresswayCertExpired

To enable the 2 Conditions:

1. Open the IptDeviceTh Threshold Properties in the Windows Client.
   • The Threshold might already be running. If it is, check to make sure ExpresswayCertAboutToExp & ExpresswayCertExpired are present in the Condition list.
   • If the 2 Conditions are not present, then the Threshold is from an earlier Prognosis version and the 12.1 version of the IptDeviceTh Threshold is needed and can be found in the Document Navigator under:
   Knowledge  -> Collaborate -> IPT Device  -> Thresholds
   • Copy the Conditions from the included IptDeviceTh Threshold in the Knowledge folder and paste into the current  IptDeviceThrunning Threshold.
2. Open the Properties of each Condition and go to the Timing tab.
3. Clear the Start Disabled checkbox.
4. Start the updated Threshold and save the Threshold to a backup location if desired.

Thank you,
Scott Baldwin