PowerProtect Data Manager - Server Disaster Recovery is unable to synchronize the primary source storage unit.

Summary: ASDR0009: Server Disaster recovery is unable to synchronize the primary source storage unit mtree.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

ASDR0009 Alerts are showing up in the Alert tab of the PowerProtect Data Manager User Interface. 
ASDR0009: Server Disaster recovery is unable to synchronize the primary source storage unit mtree: //MTREE/data/col1/SysDR_ppdm with the following replication target storage unit: mtree://MTREE/data/col1/SysDR_R_ppdm

Alert tab

From the serverdr.log, from the PowerProtect Data Manager log bundle, we have the following:
  
 "errorCode" : "DDOS_REST_AUTH_TOKEN_CREATE_EXCEPTION",
    "message" : "SDR_DDOS_REST_AUTH_TOKEN_CREATE_EXCEPTION code=500 reason=\"Create DDOS REST auth token failed with exception: Exception creating DD authentication token failed, Exception: I/O error on POST request for \"https://DataDomain:3009/rest/v1.0/auth [DataDomain]\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\" remediation=\"none\"",
    "statusCode" : "INTERNAL_SERVER_ERROR",
    "reason" : "Create DDOS REST auth token failed with exception: Exception creating DD authentication token failed, Exception: I/O error on POST request for \"https://DataDomain:3009/rest/v1.0/auth [DataDomain]\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
    "remediation" : "none",
    "objects" : [ "Exception creating DD authentication token failed, Exception: I/O error on POST request for \"https://DataDomain:3009/rest/v1.0/auth [DataDomain]\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target" ],
    "errorResponse" : {
      "code" : 500,
      "reason" : "Create DDOS REST auth token failed with exception: Exception creating DD authentication token failed, Exception: I/O error on POST request for \"https://DataDomain:3009/rest/v1.0/auth [DataDomain]\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
      "remediation" : "none",
      "timestamp" : 0,
      "path" : null
    },
    "superReason" : "Create DDOS REST auth token failed with exception: Exception creating DD authentication token failed, Exception: I/O error on POST request for \"https://DataDomain:3009/rest/v1.0/auth [DataDomain]\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target",
    "statusCodeNumber" : 500,
    "suppressed" : [ ],
    "localizedMessage" : "SDR_DDOS_REST_AUTH_TOKEN_CREATE_EXCEPTION code=500 reason=\"Create DDOS REST auth token failed with exception: Exception creating DD authentication token failed, Exception: I/O error on POST request for \"https://DataDomain:3009/rest/v1.0/auth [DataDomain]\": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target\" remediation=\"none\""
  },
  "operation" : "REPLICATION:DO_ON_MONITOR_FAILURE"
}

Cause

The Data Domain certificates were updated from the Data Domain side, but were never updated on the PowerProtect Data Manager:

certificates

Resolution

From the PowerProtect Data Manager UI, in "Administration - Certificates - External Servers," select each Data Domain that need have expired Certificates, and click "renew":

renew certificates

Affected Products

PowerProtect Data Manager
Article Properties
Article Number: 000226680
Article Type: Solution
Last Modified: 05 Jul 2024
Version:  1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.