Resolving a problem with SSL certificates

If you are unable to connect to the management GUI from your web browser and received a Certificate expired or similar error, this information might help you resolve the issue.

Procedure

  1. Access the CLI by using ssh.
  2. Run the lseventlog CLI command.
  3. Use the fix procedures for any error events, for example, 2258 - System SSL certificate has expired.
    1. If the system SSL certificate is expired and no longer valid, connections to the GUI, and service assistant are likely to generate security exceptions.
    2. Check that the system time and date is correct. If the system time or date is incorrect, it can cause the certificate to be incorrectly marked as expired.
    3. Create a new internally signed certificate or install an externally signed certificate, signed by trusted third-party certificate authority. For more information see System Certificates.
      Note: If you are using an internally signed certificate, you can enable auto-renewal to renew the certificate before it expires.