删除新安装IBM Guardium Data Protection 12.1的baltimorecybertrustroot证书

云道轩2025-04-26 18:47

登录web console，会显示 baltimorecybertrustroot证书过期警告。

采用下面的命令删除过期证书就可消除警告。

collector02.cpd.com> delete certificate keystore

Select an alias from the list below to delete the corresponding certificate.

Alias List:

$1$ digicertglobalrootca

$2$ amazonrootca4

$3$ amazonrootca3

$4$ gimca

$5$ amazonrootca2

$6$ amazonrootca1

$7$ baltimorecybertrustroot

$8$ tomcat

$9$ cas

$10$ d-trust_root_class_3_ca_2_2009

$11$ gim

$12$ sfsrootcag2

$13$ digicertglobalrootg2

$14$ snif

$15$ verisigng5

$16$ microsofteccrootcertificateauthority2017

$17$ solr

$18$ signkey

$19$ entrust_g3

$20$ microsoftrsarootcertificateauthority2017

$21$ entrust_g2

$22$ entrust_ec1

Please select the item number of your choice $1-22 or q to quit$ : 7

Warning:

The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /opt/IBM/Guardium/tomcat/.keystore -destkeystore /opt/IBM/Guardium/tomcat/.keystore -deststoretype pkcs12".

Alias name: baltimorecybertrustroot

Creation date: Apr 24, 2025

Entry type: trustedCertEntry

Owner: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE

Issuer: CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE

Serial number: 20000b9

Valid from: 5/13/00 2:46 AM until: 5/13/25 7:59 AM

Certificate fingerprints:

MD5: AC:B6:94:A5:9C:17:E0:D7:91:52:9B:B1:97:06:A6:E4

SHA1: D4:DE:20:D0:5E:66:FC:53:FE:1A:50:88:2C:78:DB:28:52:CA:E4:74

SHA256: 16:AF:57:A9:F6:76:B0:AB:12:60:95:AA:5E:BA:DE:F2:2A:B3:11:19:D6:44:AC:95:CD:4B:93:DB:F3:F2:6A:EB

Signature algorithm name: SHA1withRSA

Version: 3

WARNING: Are you sure that you want to delete the certificate corresponding to alias "baltimorecybertrustroot"? $y/N$

Warning:

SUCCESS: Certificate corresponding to alias "baltimorecybertrustroot" was deleted.

collector02.cpd.com>

执行上面的操作后刷新浏览器。警告消失。