跳转到主内容

无法将ONTAP集群添加到AIQUM、因为ONTAP不接受证书

Views:
53
Visibility:
Public
Votes:
0
Category:
active-iq-unified-manager
Specialty:
om
Last Updated:

适用场景

  • Active IQ Unified Manager (AIQUM) 9.14.
  • ONTAP 9.9.1
  • 可以将其他ONTAP集群添加到AIQUM中
  • 已禁用Cloud Agent

问题描述

  • 将ONTAP集群添加到AIQUM失败、方法是:

Unable to add cluster data source. This can occur if the clocks on the systems are not synchronized and the Active IQ Unified Manager HTTPS certificate start date is later than the date on the cluster, or if the cluster has reached the maximum number of EMS notification destinations.

  • jboss/server_acq.log 指示由于格式不正确、安装AIQUM证书失败

INFO  [default task-55] c.o.s.a.s.AcquisitionFacadeUtil (AcquisitionFacadeUtil.java:106) - [EMS] - Installing Server Certificate
INFO  [default task-55] c.n.o.n.e.EmsZapiManager (EmsZapiManager.java:98) - [EMS ZAPI] - Install Security Certificate - Common Name: <AIQUM_HOST>, Type: server-ca, Certificates: -- omitted --
ERROR [default task-55] c.o.s.a.s.AcquisitionFacadeUtil (AcquisitionFacadeUtil.java:202) - failed to register EMS: : com.netapp.oci.netapp.client.interfaces.data.EmsManagerException: Failed to read the certificate due to incorrect formatting. (errno=61102)
   at deployment.mega-app.ear.server-core.jar//com.netapp.oci.netapp.ems.EmsZapiManager.installSecurityCertificate(EmsZapiManager.java:112)
   at deployment.mega-app.ear.server-core.jar//com.netapp.oci.netapp.ems.EmsManager.installSecurityCertificate(EmsManager.java:79)
   at deployment.mega-app.ear.server-core.jar//com.onaro.sanscreen.acquisition.sessions.AcquisitionFacadeUtil.registerEms(AcquisitionFacadeUtil.java:108)
   at deployment.mega-app.ear.server-core.jar//com.netapp.sanscreen.acquisition.sessions.rest.service.impl.AcquisitionFacadeSessionServiceImpl.addDS(AcquisitionFacadeSessionServiceImpl.java:805)
   at deployment.mega-app.ear.server-api.war//com.netapp.sanscreen.acquisition.sessions.rest.service.impl.AcquisitionFacadeSessionServiceImpl$$FastClassBySpringCGLIB$$92eba61a.invoke(<generated>)

  • /etc/log/mlog/audit.log In ONTAP显示security-certificate-install  ZAPI因格式不正确而失败

[kern_audit:info:2618] 8503e8000016ec3b :: <NODE>:ontapi :: <AIQUM_IP>:63869 :: <NODE>:admin :: <netapp version='1.0' xmlns='http://www.netapp.com/filer/admin' nmsdk_version='9.8P7D1' nmsdk_platform='Windows Server 2022' nmsdk_language='Java'><security-certificate-install><type>server-ca</type><certificate>-----BEGIN CERTIFICATE-----..
[kern_audit:info:2618] 8503e8000016ec3b :: <NODE>:ontapi :: <AIQUM_IP>:63869 :: <NODE>:admin :: security-certificate-install :: Error: Failed to read the certificate due to incorrect formatting.

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.
  • 这篇文章对您有帮助吗?