Edge Devices Fail to Be Managed by FusionDirector and the Log Indicates the Certificate Has Expired

Symptom

An edge device is in the unmanaged status when it is managed by FusionDirector. The /var/alog/AtlasEdge_log/edge_proxy/edge_proxy_run.log file contains an error indicating that the certificate is invalid. See the following figure.

Possible Causes

The root certificate used by FusionDirector for management has expired.

Procedure

1. Check whether the root certificate of FusionDirector has expired.
   1. Run the following command to check the validity period of the certificate:

      openssl x509 -in <certificate_path> -noout -dates

      The certificate is stored in AtlasEdge installation path/AtlasEdge/edge_work_dir/edge_core/certFD/FD.crt.

   2. Run the date command to check the system time of the edge device.

   The following figure shows an example of the query result (The Atlas 500 AI edge station (model: 3000) is used as an example.) Compare the certificate validity period and the system time, and you can see that the certificate has expired. In this case, go to 2.

   

2. Import the FusionDirector root certificate and reconfigure NMS. For details, see "Configuration Process (Other Products) > Deploying and Updating Applications on FusionDirector > Registering with the NMS" in the MindX Edge Application Deployment Guide.

   You are advised to customize a root certificate. In addition, Huawei provides a root certificate on its official website. To obtain it, perform the following steps:

   Log in to FusionDirector, choose Menu > System Settings > Security > Certificates > Service Certificates from the main menu, and click Export to download the certificate package rootCerts.zip to the local PC. Decompress the downloaded certificate package to obtain the rootCertChain.crt certificate.