certificate renew issue

[sankar132]

I’m experiencing an issue with the auto-renewal of a Google-managed certificate for a Network Load Balancer (NLB) in Google Cloud Platform (GCP). Despite having the auto-renewal feature enabled, the certificate is not being renewed as expected.Could you please advise on how to troubleshoot this problem or suggest steps to ensure the certificate auto-renews correctly?

[kensan]

Hi @sankar132 

Welcome to Google Cloud Community!

You can follow this guide to deploy a Google-Managed certificate with a load balancer, including activating the certificate. Google certificates are valid for 90 days, and renewal is automatically processed starting one month before expiration.

For troubleshooting, If any domains or subdomains in a managed certificate does not point to the load balancer's IP address or resolve to multiple IP addresses, including the load balancer's IP, the renewal process will fail. To avoid renewal issues, ensure that all your domains and subdomains are directed solely to the load balancer's IP address. For additional details on renewing Google-Managed Certificates, refer to this documentation.

If you want to be notified when a specific data-access message appears in the audit log, you can set up notifications for that message. Additionally, you can configure alerts to monitor certificate expiration.

I hope the above information is helpful