Highlighted
3 Argentum

ISSUE: Can't discover the VMAX array using proxy to VMAX Appliance. Error: Remote client/server handshake failed.

We have found that Some people Cannot discover VMAX array by using proxy method to VMAX virtual appliance.

They get the following Error return when they run symcfg list:

The remote client/server handshake failed. Please consult symapi and storsrvd log files

we see 2 cases/issues:

Case 1: in the storsrvd logs:

<Error> [20499 SESS 0002] Apr-26 10:11:20.745 : ANR0151E Common Name in client certificate not valid:

expected "ip.ip.ip.ip", received "storsrvd hostname.domain.domain"

<Error> [20499 SESS 0004] Apr-26 10:15:05.763 : ANR0151E Common Name in client certificate not valid:

expected "ip.ip.ip.ip", received "storsrvd hostname.domain.domain"

<Error> [20499 SESS 0006] Apr-26 10:15:06.141 : ANR0151E Common Name in client certificate not valid:

expected "ip.ip.ip.ip", received "storsrvd hostname.domain.domain"

Case 2:in the  storsrvd logs:

<Error> [3390 SESS 0090] May-18 16:16:56.992 pdsSSLSetFileUsage #2962 : SSL_use_certificate_file() failed: [SSL

Error: 0x140c8002 - error:140C8002:SSL routines:SSL_use_certificate_file:system lib]

<Error> [3390 SESS 0090] May-18 16:16:56.992 : ANR0142E Certificate establishment failed with rc=700004026

([PDS/Sock] SSL object or attribute could not be set [SSL Error: 0x140c8002 - error:140C8002:SSL

routines:SSL_use_certificate_file:system lib])

<Error> [3390 SESS 0090] May-18 16:16:56.992 : ANR0152E Issue detected with server certificate file

/var/symapi/config/cert/symapisrv_cert.pem

<Info > [3390 SESS 0090] May-18 16:16:56.992 : ANR0012I Accepted SECURE session 90 from ip.ip.ip.ip on thread 89

<Error> [3390 SESS 0090] May-18 16:16:57.010 pdsSSLRead #2856 : SSL_read() failed: [SSL Error: 0x140780e5

- error:140780E5:SSL routines:SSL23_READ:ssl handshake failure]


Case 1 is : caused  by VMAX appliance looking for the ip of the SRM collector but it gets the fqdn of it.

Case 2: is caused by The VMAX appliance built 8.1.0 which was not compatible with SRM collector Solution Enabler certificate.


TO RESOLVE THIS

Case 1: Log in to the VMAX Appliance GUI https://IP.IP.IP.IP:5480

Login with the default user/password >> go to Command Excution tab >> click on host configuration >> then edit the

/etc/hosts >> add the IP/ FQDN/ short name of SRM collector host to it.

Case 2: There is issue with VMAX Appliance 8.1.x build. To address the issue you have to upgrade your appliance to

8.2.0

0 Kudos
Reply