Unable to Add Cluster or acquisition fails for existing clusters on AIQUM due to expired client certificate
Applies to
- Active IQ Unified Manager (AIQUM)
- Certificates
- AIQUM was installed over 5 years ago
Note: The installation date can be confirmed with Install_Upgrade.log
------ postinst start Sat Feb 9 10:10:20 UTC 2019 ------
Issue
- Attempting to add a cluster to AIQUM fails:
Unable to add cluster data source. This can occur if the clocks on the systems are not synchronized and the Active IQ Unified Manager HTTPS certificate start date is later than the date on the cluster, or if the cluster has reached the maximum number of EMS notification destinations.- Excerpt from
Audit.logfrom affected Cluster after attempting to add to AIQUM:
kern_audit:info:3167] 8503e80000dac04e :: clustername:ontapi :: xx.xxx.xxx.xx:52938 :: clustername:user :: security-certificate-install :: Error: The certificate has expired.- Excerpts from
server_acq.logfrom affected Cluster after attempting to add to AIQUM:
ERROR [default task-6260] c.n.s.a.s.r.s.i.AcquisitionFacadeSessionServiceImpl (AcquisitionFacadeSessionServiceImpl.java:843) - Fail to add data source for acquisitionUnitName: local, dataSourceName: <cluster name>, vendor:NetApp OCI Essentials, model: NetApp OCI Essentials, datasourceTypeId: 91, manual: 1, isActive: false, attrs: -- listing properties --
<truncated>
: com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105) (errno=
Certificate expired seen in server_acq.log:
ERROR [default task-340653] c.o.s.a.s.AcquisitionFacadeUtil (AcquisitionFacadeUtil.java:202) - failed to register EMS: : com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105)