Regenerating the Default Key Ring on Cisco UCS

Problem Summary

Cisco UCS alert – default Keyring’s certificate is invalid, reason: expired.

Solution

SSH to UCS Manager cluster IP address and login as an admin user:

ssh -l admin 10.16.8.101

UCS-A# scope security
UCS-A /security # scope keyring default
UCS-A /security/keyring* # set regenerate yes
UCS-A /security/keyring* # commit-buffer
UCS-A /security/keyring #
UCS-A /security/keyring # scope security
UCS-A /security # show keyring detail

Links:
https://community.cisco.com/t5/unified-computing-system/default-keyring-s-certificate-is-invalid/td-p/2016168
http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/2.0/b_UCSM_CLI_Configuration_Guide_2_0_chapter_0110.pdf

Leave a comment

You must be logged in to post a comment.