Azure IoT Certd service always shows auto renewal certificate message even if we disable it.

[malavvvakharia]

If I am not using the auto-renewal feature for the identity certificate, the system still shows a message in the logs(As shown in the code snippet below). In my opinion, if we don’t specify a setting, it defaults to 80%. Does anyone know if this is accurate? Additionally, how can I completely disable this feature?

[cert_issuance.est.identity_auto_renew] rotate_key = false threshold = "80%" retry = "4%"

Additionally, I also found one similar bug, but it's closed.

#7302

[vipeller]

@malavvvakharia

The est-id certificate is used by certd to authenticate with the EST server. It must be auto-renewed, because otherwise EST will stop working when it expires. So there's no option to disable auto-renewal for that cert

[malavvvakharia]

@vipeller , But in some cases, let's assume that the customer did not start the hardware for a few years, and it's good to discontinue the service In that case, we will not auto-renew the EST certificate, so somehow it's possible to achieve it.

Could you please clarify what the default threshold of 80% refers to?(Even if I tried to specify 98%, it will still take 80%.)