35010300 : Certificate Authority with common name [arg1] failed validation and requires regeneration.

The resident Certificate Authority (CA) for the Chassis Management Module (CMM) has failed a self-test. The issue will likely be corrected by regenerating the CA. This failure can affect CMM communications with management applications (such as Flex System Manager - FSM), the CMM user interfaces, communications with end nodes, as well as other system-management functions.

Severity

Warning

Alert Category

Chassis/System Management (Warning)

Log Source

SERVPROC

Serviceable

Yes

Recoverable

Yes

Chassis LED that is Lit

None

CIM Information

Prefix:CMM

and ID:0794

SNMP Trap ID

mmTrapChassisN

Automatically Notify Support

No

User Response

Regenerate the CA using either the CMM web-based user interface or the CMM command-line interface (CLI). The regeneration of the CA is a disruptive action and will have the following consequences:

1. The web servers on the CMM and all end nodes managed by CMM, will be restarted.
2. Any management applications, such as the FSM, will need to import the new CA into their trust store.
   • If you are using FSM, version 1.3.2 or earlier, download the CA root certificate from the CMM and import it into the certificate trust store on the FSM.
   • If you are using FSM, version 1.3.3 or later, use the FSM to repair CMM CA.
3. You must import the new CA root certificate into any web browser used to access CMM ,FSM and node UI's to avoid untrusted certificate errors in the browser.