General Alarms

General Alarms

General alarms include alerts within Intersight that are generic and not related to Server, Chassis and FEX, or Fabric Interconnect alarms categories.

Following table shows the description of the supported general alarms for Intersight.

Name MO Severity Explanation Recommended Action
ApiKeyExpiringCritical iam.ApiKey Critical This alarm is raised when there is an API key that is about to expire in the next 7 days. If permissible, extend the expiration date of the API key. If extension of expiry date is not possible, delete the API key and replace it with a new API key. If the API key is no longer required, disable and delete the API key.
ApiKeyExpiringWarning iam.ApiKey Warning This alarm is raised when there is an API key that is about to expire in the next 30 days. If permissible, extend the expiration date of the API key. If extension of expiry date is not possible, delete the API key and replace it with a new API key. If the API key is no longer required, disable and delete the API key.
ApiKeyIsNeverExpiring iam.ApiKey Info This alarm is raised when there is an existing API key or a new API key is generated without a specified expiration date. Keys that never expire pose a security risk.

If required, delete the never-expiring key and replace it with a key with an expiration date or set an expiration date using the calendar.

BootPolicyReservedKeywordUsed

boot.PrecisionPolicy

Warning

A boot policy configuration uses a reserved keyword as a custom identifier or name, which is not allowed.

  1. Review the boot policy to identify the reserved keyword.

  2. Replace the reserved keyword with an allowed term.

  3. Validate and reapply the corrected policy.

  4. Monitor the condition for recurrence. If needed, contact Cisco TAC for the reserved-keyword list or syntax.

FirmwareCdnDomainChange

firmware.UpgradeStatus

Warning

This alarm is raised when the CDN URL is not reachable preventing access to the required domain for firmware downloads and potentially impacting upgrade operations.

Update the proxy or firewall settings to allow access to the following content delivery network (CDN) domains:

  • cdn.intersight.com

  • cdn.eu-central-1.intersight.com, if applicable to your region

IamApiKeyExpired

 iam.ApiKey

Critical

An API key has expired and can no longer be used for authentication or API access. Rotate or remove the key to restore access and maintain security hygiene.

  1. If the API key is still required, delete the expired key and replace it with a new key.

  2. If the API key is no longer required, delete it.
IamOAuthApplicationExpired iam.AppRegistration Critical

An OAuth application credential in the Intersight account has expired. Dependent integrations can no longer use this credential.

  1. Click the gear icon, and navigate to Settings > OAuth Applications or App Registrations.

  2. Use the alarm details to identify the expired application.

  3. Create or rotate the credentials, and specify an expiration date.

  4. Update the integration that uses the credentials.

  5. Delete or disable the expired application, and verify that the alarm clears.
OAuthApplicationExpiringCritical iam.AppRegistration Critical This alarm is raised when there is an OAuth 2.0 Application that is about to expire in the next 7 days. If permissible, extend the expiration date of the OAuth 2.0 Application. If extension of expiry date is not possible, delete the OAuth 2.0 Application and replace with a new OAuth 2.0 Application. If the OAuth 2.0 Application is no longer required, disable and delete the OAuth 2.0 Application.
OAuthApplicationExpiringWarning iam.AppRegistration Warning This alarm is raised when there is an OAuth 2.0 Application that is about to expire in the next 30 days. If permissible, extend the expiration date of the OAuth 2.0 Application. If extension of expiry date is not possible, delete the OAuth 2.0 Application and replace with a new OAuth 2.0 Application. If the OAuth 2.0 Application is no longer required, disable and delete the OAuth 2.0 Application.
OAuthApplicationIsNeverExpiring iam.AppRegistration Info This alarm is raised when there is an OAuth 2.0 Application that is set to never-expire. OAuth 2.0 Applications that never expire pose a security risk. If required, delete the never-expiring OAuth 2.0 Application and replace with a new OAuth 2.0 Application with expiration date.

PowerGroupInsufficientPower

 power.PowerGroup

Critical

The power group does not have sufficient power budget to meet the minimum power requirements of all its members. This typically occurs when new hardware is added to a member chassis, increasing its minimum power requirement.1

  • Consider increasing the power budget of the power group.

  • Remove power group members to reduce the total power demand, or remove hardware from member chassis to lower the minimum power requirements of chassis.

  • If the issue persists, contact Cisco TAC.

PowerGroupPartiallyConfigured

 power.PowerGroup

Critical

The power group configuration failed mid-way. Some members may be configured while others are not. Some member chassis may not have proper power limits applied.

  • Review the power group workflow status for errors. Retry the power group configuration by updating the power group.

  • If the issue persists, contact Cisco TAC.

PowerGroupPartiallyDeleted

 power.PowerGroup

Critical

The power group delete operation did not complete successfully for all members. Some member chassis may still have power limits applied while others have been cleared.

  • Retry the delete operation on the power group. If the issue persists, manually clear the power limits on the affected chassis.

  • If the issue persists, contact Cisco TAC.

PowerGroupPartiallyDisabled

power.PowerGroup

Critical

The power group disable operation did not complete successfully for all members. Some member chassis may still have power limits applied while others have been cleared.

  • Retry the disable operation on the power group. If the issue persists, manually clear the power limits on the affected chassis.

  • If the issue persists, contact Cisco TAC.
IamSingleAccountAdminLockoutStatus iam.Account Warning

The account has only one effective Account Administrator. If this administrator loses access, the account might be locked out.

  1. Click the gear icon, and navigate to Settings > Users and Groups or Access and Permissions.

  2. Add another user with Account Administrator role, or create/choose a group and assign Account Administrator.

  3. Confirm the user/group can sign in.

  4. Avoid relying on one individual admin account.

StoragePureArrayWarningAlert

storage.PureArrayAlerts

 Warning

An associated Pure Storage array reported a warning alert. Confirm the exact condition in the native Pure alert details.

  1. In Intersight, navigate to System > Infrastructure > Storage > Pure > affected array.

  2. Open the alerts or events for the array, and record the alert ID and message.

  3. Cross-launch Pure1 or Purity, or sign in for the affected array.

  4. Apply the Pure remediation.

  5. Return to Intersight, refresh the page, and check the alarm state.

StoragePureArrayCriticalAlert

storage.PureArrayAlerts

Critical

An associated Pure Storage array reported a critical alert. Treat this condition as potentially service-affecting.

  1. Navigate to System > Infrastructure > Storage > Pure > affected array.

  2. Open the critical alert, and record the alert ID and message.

  3. Sign in to Pure1 or Purity, and complete the corrective action specified for the alert.

  4. Return to Intersight, and confirm the status after completing the remediation.