title: VMware vCenter Server Appliance: Machine TLS Certificate
agents: vcsa_health
catalog: app/vmware
license: GPL-2.0-only
distribution: check_mk
description:
 This check monitors the remaining validity of the machine TLS
 certificate of a VMware vCenter Server Appliance (VCSA). The data is
 retrieved by the special agent {agent_vcsa_health} from the vCenter
 certificate management API.

 Lower levels on the remaining validity can be configured via the
 ruleset "VCSA TLS certificate". The default levels are 30 days {WARN}
 and 15 days {CRIT}. An expired certificate is always {CRIT}.

 The service also checks that the appliance hostname appears in the
 certificate, either as the common name or among the subject alternative
 names. A hostname absent from both causes a certificate warning for every
 client connecting by that name, and reports {WARN} by default. The
 comparison is case-insensitive, since DNS names are.

discovery:
 One service is created if the certificate information is accessible
 with the configured account.
