Secure Connect Gateway: ConnectEMC (HTTPS port 443) Certificate Expiry - 21 March 2025

Impacted products include VMAX/VMAX3, PowerMax (excluding PowerMax V4), VNX2, eNAS, and Avamar.

This issue affects the ConnectEMC HTTPS transport only. ConnectEMC configurations using other protocols (for example, SMTP) are not impacted.

Affected products stop calling home with ConnectEMC logs showing:

http failed SSL certificate problem: certificate has expired, error:60
SSL certificate problem: certificate has expired

The ConnectEMC server (SCG gateway on port 443) and ConnectEMC root certificate (products) expire on March 21 20:06:17 2025 UTC and March 22 20:16:13 2025 UTC respectively.

To maintain call-home functionality, update each product to a version containing the new ConnectEMC root certificate once the product update is available.

You must also update the SCG gateway to version 5.24 (or above), which has a new ConnectEMC server certificate for port 443. These upgrades can be performed anytime prior to the SCG gateway certificate expiry on 21-March-2025 20:06:17 GMT, and in any order. When products are updated to a version containing the new certificate, they have both the new and old root certificates in their ConnectEMC trust store to ensure no interruption in connectivity when the gateway’s server certificate changes.

SCG v5.24 performs a certificate validity check at 01:30 (local time on the gateway) each day and will switch to the new server certificate 24 hours before it expires.