Improve certificate lifecycle visibility in IBM Storage Fusion Backup & Restore

IBM Storage Fusion should provide better visibility into the certificates and TLS secrets used by the Backup & Restore service.

In production environments, Backup & Restore depends on several internal certificates and Kubernetes secrets. When one of these certificates expires or is not renewed correctly, service components may fail to start and backups may stop running. Today, it is difficult for administrators to quickly identify which certificate is used by which component, when it expires, and whether it is expected to rotate automatically.

Without this visibility, identifying an expired certificate as the root cause requires extensive operational experience with IBM Storage Fusion, OpenShift, Kubernetes secrets, pods, logs, and service dependencies. Even for experienced administrators, the diagnostic process can be time-consuming, because an expired certificate is not immediately visible as the underlying cause in the Fusion UI.

The Fusion UI should include a certificate lifecycle view for Backup & Restore that shows the relevant TLS secrets, certificate expiration dates, issuing CA, affected pods or services, and renewal status. It would also be helpful to show warnings before certificates expire and provide guided remediation steps or a supported renewal workflow.

Business value:
This would help administrators detect certificate-related risks before they cause production backup outages, reduce troubleshooting time, and lower the number of support cases for expired or non-rotated internal certificates.