Session Manager requires certificates for securing SIP and HTTP (for Personal Profile Manager) connections, and for communication between the Session Manager and System Manager. If a certificate has expired, the Session Manager may be unable to establish any new connections and security might be compromised. In many cases, TCP and UDP are not options, so certificate lifetime must be monitored.
When a certificate is approaching its expiration:
A warning message is periodically logged, starting 60 days before expiration.
In most cases, a major alarm is logged daily if the certificate is within 30 days of expiring.
A critical alarm is generated when the certificate is within 15 days of expiring
It is important, therefore, that the warning expiration alarms be resolved without delay before the major and critical alarms are raised.
