PKI_1.3.6.1.4.1.2011.6.122.34.0.2.17 hwPKICrlNearlyExpired

Description

PKI/4/PKICRLNEARLYEXPIRED: OID [oid] the crl is nearly expired. (CrlIssuer=[crlissuer], CrlStartTime=[crlstarttime], CrlFinishTime=[crlfinishtime])

The CRL is about to expire.

Attribute

Alarm ID	Alarm Severity	Alarm Type
1.3.6.1.4.1.2011.6.122.34.0.2.17	Warning	communicationsAlarm

Parameters

Name	Meaning
oid	Indicates the MIB object ID of the alarm.
crlissuer	Indicates the issuer of the CRL.
crlstarttime	Indicates the start time of the CRL.
crlfinishtime	Indicates the end time of the CRL.

Impact on the System

The service becomes invalid.

Possible Causes

The CRL is to expire. The CRL expiration time is less than 2 hours ahead of the current system time.

Procedure

Run the display clock command to check whether the device time is correct.
If not, run the clock datetime command in the user view to change the device time.
Obtain a new CRL. For details, see "Configuring Local Certificate Check" in S2720, S5700, and S6700 V200R019C10 Configuration Guide - PKI Configuration.