Data Domain：升级预检查发现一个阻止问题。DD 信任版本不正确的 CA （4）。 

Summary: 摘要：由于信任链中的旧证书，DDOS 预检查失败。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

症状：在升级预检查期间出现错误：当前升级状态：DD 操作系统预检查发现 1 个阻止问题。

 

注意： 预检查阻止问题在 /ddr/var/log/debug/platform/infra.log 中记录并带有数字错误代码。如果您遇到没有描述性消息的数字错误代码（例如“error 34”），请查看infra.log以了解详细的错误描述：

 

log view debug/platform/infra.log

搜索“precheck”或“blocking”条目以识别具体问题，并将其与相应的解决方案文章进行匹配。


示例： 

sysadmin@dd9300# system upgrade status
Current Upgrade Status: DD OS precheck found 1 blocking issue(s)
Node   Severity   Issue                           Solution
----   --------   ------------------------------  --------
0      WARNING    The default                     Local user passwords may
                  password-strength policy        need to be modified to
                  will be updated after the       comply with new policy.
                  upgrade.
0      CRITICAL   DD trusts CA with incorrect     Retry upgrade after
                  version (4).                    Regenerating the CA with
                                                  subject <systemhostname>
0      WARNING    1 precheck script(s) failed     Please get more details in
                  to complete                     /ddr/var/log/debug/platform/in
                                                  fra.log
End time: 2023.06.21:12:47

Cause

信任链中有一个旧证书。

Resolution

1.查看 DD 上的信任。 

  •     #adminaccess 信任显示
  •     从预先检查的错误中查找相应的主机名。


示例：     

sysadmin@dd9300# adminaccess trust show
Subject                 Type         Valid From                 Valid Until                Fingerprint
---------------------   ----------   ------------------------   ------------------------   -----------------------------------------------------------
<systemHostname>        trusted-ca   Thu Mar 24 10:33:03 2011   Sun Mar 16 10:33:03 2042   6F:22:F5:ED:F6:F2:29:82:2A:17:CE:6A:31:9D:2A:E2:60:2B:69:81
ddmc                    trusted-ca   Sun Aug 24 10:22:40 2014   Wed Aug 16 10:22:40 2045   1B:CC:CC:44:04:ED:21:B9:69:D2:7C:96:31:C7:DE:BC:15:CC:04:AB
dpc                     trusted-ca   Tue Nov 12 20:30:53 2019   Tue Nov 13 20:30:53 2029   A1:57:6A:10:B8:1E:88:72:01:88:61:F1:7D:D4:BC:22:4D:14:73:36
dd9300                  trusted-ca   Wed Oct  7 11:37:39 2020   Tue Oct  6 11:37:39 2026   54:A8:64:D1:FA:60:3C:81:42:89:D5:DD:78:D1:2B:74:AF:E6:F5:04
dd9300                  trusted-ca   Wed Oct  7 11:46:36 2020   Tue Oct  6 11:46:36 2026   DE:C2:6B:CC:BA:7A:EE:14:11:8E:76:CC:9A:23:A7:C4:8E:0D:6F:53
---------------------   ----------   ------------------------   ------------------------   -----------------------------------------------------------

2.与客户确认他们是否仍在使用与错误主机名对应的 DD 系统。系统不再使用是很常见的。它还可用于 DDMC 监视。您也可以使用命令确认它是否用于复制：

  •     #replication show config 
  •     这会检查 DD 是否正在使用该主机名进行 mtree 复制，如果该主机名正在使用中，则必须重新生成证书。 
  •      在此示例中，DD 不再使用，并且在复制配置中找不到。

        
示例： 

sysadmin@dd9300# replication show  config
CTX   Source                                                  Destination                                             Connection                          Low-bw-optim   Crepl-gc-bw-optim   Encryption    Enabled   Max-repl-
                                                                                                                      Host and Port                                                          (Auth-mode)             streams
---   -----------------------------------------------------   -----------------------------------------------------   ---------------------------------   ------------   -----------------   -----------   -------   ---------
1     mtree://dd9300/data/col1/DD9300                          mtree://9300/data/col1/DD9300   dd9300.xxxx.org         (default)                             disabled       disabled            disabled      yes       32
---   -----------------------------------------------------   -----------------------------------------------------   ---------------------------------   ------------


3.如果确认复制或 DDMC 不需要信任，请删除旧信任：

  •     # adminaccess trust del host <hostname of other DD>
  •     示例： # adminaccess trust del host <systemHostname>

        
4.尝试重新运行预检查，它应该会成功。 
 

Affected Products

Data Domain
Article Properties
Article Number: 000215203
Article Type: Solution
Last Modified: 15 يوليو 2026
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.