NSX-T Data Center generates alarms when a certificate is nearing its expiry or if a certificate has already expired.
NSX-T Data Center generates alarms under following events:
- Medium severity alarm starting 30 day before certificate expiry.
- High severity alarm starting 7 days prior to expiry.
- Critical severity alarm every day after certificate expires.
Certificate Expiry alarms contains details on certificate ID, severity, node, first/last report time, and recommended action.
As a remedial, you must replace the expiring External Platform certificate with a new valid certificate and delete expiring certificate.