适用于VMware vSphere的ONTAP工具：将存储系统添加到OTV时出现相互身份验证错误

适用场景

• 适用于VMware vSphere (OTV) 9.13P1 及更高版本的NetApp ONTAP工具
• NetApp ONTAP 9.

问题描述

• 将新存储系统添加到OTV时、可能会出现以下错误：
  • An error occurred while adding Storage System. An unspecified error occurred when connecting to the controller at IP address x.x.x.x.
  • Any communication between ONTAP tools plug-in and the storage system should be mutually authenticated.
• 在OTV nvpf.log 中，可以看到类似的错误：

[2024-03-27T15:29:08,021Z] [pool-3-thread-1] [ERROR] Error pushing b92bf2d4-d520-11ec-a973-d039ea4d2b49(addr=192.168.0.101:443, user=admin)
com.netapp.vasa.vvol.api0_4.beans.exceptions.VPServerException: com.netapp.offtap3.ConnectionException: Unable to communicate with ONTAP at 192.168.0.101: Certificate is expired. (errno=9999)  com.netapp.offtap3.ontap.ApiFailedException: Certificate is expired. (errno=9999)

• 在ONTAP命令行界面中、我们可以看到证书已过期。

cluster1::> security certificate show -type server -fields expiration,vserver,serial,common-name,ca
vserver  common-name        serial       ca        type   subtype cert-name                  expiration
-------- ------------------------ ---------------- --------------- ------ ------- ----------------------------------------- ------------------------
cluster1 cluster1.demo.netapp.com A157525492DC6296 demo.netapp.com server -     cluster1.demo.netapp.com_A157525492DC6296 Tue May 16 22:05:19 2023
svm1_cluster1 svm1_cluster1     17422E6AED3CDB56 svm1_cluster1   server -     svm1_cluster1_17422E6AED3CDB56       Fri Feb 09 14:30:48 2024