Host Certificate Retrieval via SNMP

When a security certificate is installed locally on the Oracle® Enterprise Session Border Controller , you can poll the expiration of the certificate using the apSecurityCertificateTable.

You can configure the Oracle® Enterprise Session Border Controllerto generate the apSecurityCertExpiredNotification trap once a certificate has expired. The number of minutes between notifications sent is configured in the security-config parameter local-cert-trap-int.

To send a warning of expiration, you can set the security-config parameter local-cert-exp-warn-period to the number of days before the locally installed certificate expires in which you would like a warning.

Host Certificate Retrieval Configuration

To configure the Oracle® Enterprise Session Border Controller to generate traps when a certificate has or is about to expire:

1. Navigate to the security-config configuration element.

   ORACLE# configure terminal 
   ORACLE(configure)# security#
   ORACLE(security)# security-config
   ORACLE(security-config)#

2. Set the local-cert-exp-warn-period parameter to the number of days before the locally installed certificate expires in order to receive a warning. A value of 0 disables the trap.

   ORACLE(security-config)# local-cert-exp-warn-period 3
   ORACLE(security-config)#

3. Set the local-cert-trap-int parameter for the number of minutes between notifications sent once a certificate has expired. A value of 0 disables the warning trap.

   ORACLE(security-config)# local-cert-exp-trap-int 15
   ORACLE(security-config)#

4. Use done, exit, and verify-config to complete required configuration.