由于客户端/HTTPS 证书过期，无法在 AIQUM 上添加集群或对现有集群进行采集
适用于
- Active IQ Unified Manager (AIQUM) 9.x
- ONTAP 9
- AIQUM 和 ONTAP 集群通过使用相同的 NTP 设置进行时间同步
- AIQUM 是在 5 年前安装的
注：安装日期可通过Install_Upgrade.log
------ postinst start Sat Feb 9 10:10:20 UTC 2019 ------
问题描述
- 尝试将 ONTAP 集群添加到 AIQUM 失败：
Unable to add cluster data source. This can occur if the clocks on the systems are not synchronized and the Active IQ Unified Manager HTTPS certificate start date is later than the date on the cluster, or if the cluster has reached the maximum number of EMS notification destinations./server/ocumserver.log在 AIQUM 中表示 HTTP 500 与Failed to add the datasource
INFO [admin] [default task-22] [c.n.d.o.o.s.z.OntapSecurityCertificateZapiService] Installing self-signed client certicate on ONTAP
..
ERROR [admin] [default task-22] [c.n.d.c.h.DatasourcesHttpClientManager] Failed to add the datasource
com.onaro.commons.exception.ConfigurationException: Server returned HTTP status 500.HTTP error message :{"timestamp":"<TIMESTAMP>","status":500,"error":"Internal Server Error","path":"/acquisition-api/server/datasource"}
at com.netapp.mega//com.onaro.commons.framework.mgmt.HTTPClientManager.logHTTPErrorStatusWithMessage(HTTPClientManager.java:120)
at deployment.dfm-app.war//com.netapp.dfm.collector.httpclient.DatasourcesHttpClientManager.addDS(DatasourcesHttpClientManager.java:243)
at deployment.dfm-app.war//com.netapp.dfm.collector.OcieAcquisitionFacade.addDataSource(OcieAcquisitionFacade.java:287)
at deployment.dfm-app.war//com.netapp.dfm.collector.AbstractDataSourceManager.addDataSource(AbstractDataSourceManager.java:53)
at deployment.dfm-app.war//com.netapp.dfm.collector.AbstractDataSourceManager$$FastClassBySpringCGLIB$$babcc85.invoke(<generated>)
..
/etc/log/mlog/audit.log在 ONTAP 集群中表示证书安装因过期而失败
[kern_audit:info:3167] 8503e80000dac04e :: clustername:ontapi :: xx.xxx.xxx.xx:52938 :: clustername:user :: security-certificate-install :: Error: The certificate has expired./jboss/server_acq.log在 AIQUM 中表示证书已过期
ERROR [default task-6260] c.n.s.a.s.r.s.i.AcquisitionFacadeSessionServiceImpl (AcquisitionFacadeSessionServiceImpl.java:843) - Fail to add data source for acquisitionUnitName: local, dataSourceName: <cluster name>, vendor:NetApp OCI Essentials, model: NetApp OCI Essentials, datasourceTypeId: 91, manual: 1, isActive: false, attrs: -- listing properties --
<truncated>
: com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105) (errno=
..
ERROR [default task-340653] c.o.s.a.s.AcquisitionFacadeUtil (AcquisitionFacadeUtil.java:202) - failed to register EMS: : com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105)
或
: com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: Failed to install security certificate, response code = 400 (errno=0) (errno=0) (errno=0)
或
INFO [default task-59] c.n.o.n.e.EmsZapiManager (EmsZapiManager.java:98) - [EMS ZAPI] - Install Security Certificate - Common Name: <AIQUM_IP>, Type: server-ca, Certificates: -- omitted --
ERROR [default task-59] c.o.s.a.s.AcquisitionFacadeUtil (AcquisitionFacadeUtil.java:202) - failed to register EMS: : com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: The certificate has expired. (errno=61105)