Re: More detail
More to the point is why the fsck the s/w doesn't present a big flashing dialog stating "Certificate about to expire for..
.. failing to insert money. Back in the simpler days, you bought kit, it had software, you paid for a service contract that supported it, including access to software updates. Then along came software as a service, and new revenue streams. So instead of buying kit, you pay an annual rent or it can stop working.
Which can (or should) factor into vendor selection given it can work out to a lot of money, especially if vendors want $$$ every time you add a device, or in some cases just add a new virtual circuit. Alcatel's NMS used to work on that model where you bought licence packs of points, and actions cost points. They weren't selected for a large network I worked on mainly for that reason. Nice kit, lousy business model.
I'm a bit suprised that this happened. An expired cert should have been flagged as a critical risk, if that resulted in a network shutdown. Plus given $$$ for new licences, a sales bod should have been chasing for renewals.
Biting the hand that feeds IT
