Error message: "The Server refused a connection due to security level mismatch"

After upgrading Solutions Enabler on Client and Server, all SYMCLI commands fail with error, "The Server refused a connection due to security level mismatch."

No changes were made to the netcnfg file.

Before the upgrade, the SYMAPI client and server were operating in a NONSECURE environment.


Errors in symapi log:

EMC:SRVdaemon             srvShowReadyMessage  ANR0020I SYMAPI server listening on port 2707 over IPv4 only
EMC:SRVdaemon             srvShowReadyMessage  ANR0001I SYMAPI server ready to accept ONLY SECURE connections
EMC:SRVdaemon             srvCheckSecurityLeve ANR0143E Rejected session xxx.xxx.xxx.xxx: security level mismatch reason: Server expects secure, client expects non-secure

By default, the SYMAPI client and server are configured to negotiate using only a secure connection. To connect to the SYMAPI server using a NONSECURE connection, you must update the options file on the SYMAPI server to change the value of the SYMAPI_SECURITY_LEVEL parameter. From the SYMAPI options file:

# Parameter:            SYMAPI_SECURITY_LEVEL
#
# Allowed values:       SECURE | ANY | NONSECURE 
#
# Default value:        SECURE
#
# Description:          Specifies the session security level. Should be SECURE 
#                       on all platforms where Solutions Enabler supports SSL; 
#                       NONSECURE otherwise.  Possible values are:
#
#                       SECURE: Accept secure sessions only.
#                       NONSECURE: Accept non-secure sessions only
#                                  (client and server do not initialize
#                                   secure socket library).   
#                       ANY: Accept both types. 
#                       Refer to the Solutions Enabler release notes.
#
#SYMAPI_SECURITY_LEVEL = SECURE

By default, only SECURE connections are allowed. Changing this value to ANY allows both SECURE and NONSECURE connections. You can also change this value to NONSECURE, which only accepts NONSECURE client connections. The value on the client must match the allowed values on the server or it generates this error.

Workaround: Change the value of the SYMAPI_SECURITY_LEVEL entry in the options file. By default, this file is located in the following directories:

• Windows - C:\Program Files\EMC\SYMAPI\config\options
• Linux - /var/symapi/config/options

Edit the following line:

#SYMAPI_SECURITY_LEVEL = SECURE

Change this to:

SYMAPI_SECURITY_LEVEL = ANY

Once this change is made, stop and restart the storsrvd daemon using the following commands:

stordaemon shutdown storsrvd -immediate
stordaemon start storsrvd