Avaya Experience Portal product certificate

Avaya Experience Portal installer installs a dedicated Avaya Experience Portal 8.x product certificate at the /etc/asg/Product.p7b directory in each server. The product certificate is x509v3 compliant and is derived from Avaya IT Root CA. It uniquely identifies the major releases of Avaya Experience Portal to the Avaya EASG backend server.

Product certificate contents

To view the contents of the product certificate, you must run the EASGProductCert --certInfo command.

Example:

EASGProductCert --certInfo
Subject: CN=Avaya Experience Portal  8.1, OU=EASG, O=Avaya Inc.
Serial Number: 10001
Expiration: Jul 27 04:00:00 2031 GMT
Trust Chain:
1. O=Avaya, OU=IT, CN=AvayaITrootCA2
2. DC=com, DC=avaya, DC=global, CN=AvayaITserverCA2
3. O=Avaya Inc, OU=EASG, CN=EASG Intermediate CA 
4. CN=Product EASG Intermediate CA, OU=EASG, O=Avaya Inc.
5. CN=Avaya Experience Portal  8.1, OU=EASG, O=Avaya Inc.

Product certificate update

Every major release requires the generation of a new EASG product certificate. The Avaya Experience Portal 8.x product certificate shipped with the 8.x release is the EASG product certificate for all Avaya Experience Portal 8.x releases.

If the product certificate is deleted, modified, or replaced illegally, Avaya can no longer provide remote access support to the customer.

If the Avaya backend server revokes the Avaya Experience Portal 8.x product certificate, only a software patch or new software release can replace the revoked certificate.

Product certificate monitoring

The Avaya Experience Portal 8.x EASG product certificate is valid for 15 years. The primary EPM raises major alarms when the product certificate approaches the following expiration days:

EASG Product certificate expiration pending:
- 365 days
- 180 days
- 30 days
EASG Product Certificate expired.