Data Domain:DDOS 7.x 升級後,無法存取 Enterprise System Manager UI
Summary: 在升級至 DDOS 7.x 後,無法存取 Data Domain Enterprise Manager (DDEM) / 系統管理圖形使用者介面 (GUI)
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
在升級至 DDOS 7.x 後,無法存取 Data Domain Enterprise Manager (DDEM) / 系統管理圖形使用者介面 (GUI)。 系統會報告 DDSM 服務無法使用。
檔案中會回報下列錯誤 em.info
檔案中會回報下列錯誤 em.info
#log view debug/sm/em.info 12 Apr 2021 20:21:40,536 INFO [main] SMS is running in secure (HTTPS) mode. 12 Apr 2021 20:21:40,817 INFO [main] *** Creating mutual auth connection manager, max connections: 45, max connections per host: 2 12 Apr 2021 20:21:40,839 INFO [main] *** Creating no mutual auth connection manager, max connections: 1, max connections per host: 1 12 Apr 2021 20:21:40,839 INFO [main] *** Creating Http Client with connectTimeout: 30000, socketTimeout: 120000, connectionManagerTimeout: 30000 12 Apr 2021 20:21:40,916 INFO [main] *** Creating Http Client with connectTimeout: 30000, socketTimeout: 120000, connectionManagerTimeout: 30000 12 Apr 2021 20:21:41,217 INFO [main] Re-initializing the certificates between the client and the server 12 Apr 2021 20:21:41,217 INFO [main] Reloading the certificate stores for the system 12 Apr 2021 20:21:41,228 INFO [main] Finished reloading the certificate stores 12 Apr 2021 20:21:41,229 ERROR [main] Exception during command execution: javax.net.ssl.SSLException - Error creating premaster secret. , will retry, Attempt# 1 12 Apr 2021 20:21:41,380 INFO [main] Re-initializing the certificates between the client and the server 12 Apr 2021 20:21:41,381 INFO [main] Reloading the certificate stores for the system 12 Apr 2021 20:21:41,397 INFO [main] Finished reloading the certificate stores
Cause
自 DDOS 6.0 起,GUI 預設使用的憑證金鑰長度為 2048。而在 DDOS 5.x 版本中,金鑰強度為 1024 位元。金鑰長度增加到 2048。
DDOS 7.x 會強制使用此金鑰強度,以強化安全性功能
DDOS 7.x 會強制使用此金鑰強度,以強化安全性功能
Resolution
針對使用預設自我簽署憑證的系統
步驟 1:
- 如果您已檢查「em.info」,確定我們已在此 KB 中遇到問題,請依照本 KB 中的步驟重新產生新的 CA 憑證:
- Data Domain:Web UI 因 https 憑證過期而無法存取
步驟 1:
- 以「sysadmin」或同等使用者身分,透過 CLI 登入 DD 然後進入「SE 權限模式」
注意:DDOS 版本 7.7.5.25、7.10.1.15、7.13.0.15、6.2.1.110 及更新版本中已淘汰 SE 命令,僅供 Dell 員工存取
- 刪除目前使用的憑證
# adminaccess certificate delete imported-host application https
- 現在,請依照本 KB 中的步驟產生新的自我簽署 CA 憑證
- Data Domain:Web UI 因 https 憑證過期而無法存取
- 若要匯入新的外部簽署憑證,請使用此 KB:
- Data Domain:如何產生憑證簽署要求和使用外部簽署憑證
Affected Products
Data DomainArticle Properties
Article Number: 000185217
Article Type: Solution
Last Modified: 04 Sept 2025
Version: 9
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.