NetWorker: nsrauthtrust: Failed to retrieve certificate: GET failed with HTTP-ERROR: 404

• NetWorker/AUTHC Server is a Linux server or NetWorker Virtual Edition (NVE) appliance.
• NetWorker Management Console (NMC) logins fail with:   

• The nsrauthtrust command on the NetWorker server fails with the message:

# nsrauthtrust -H authc_server_hostname -P 9090
125927:nsrauthtrust: Failed to retrieve certificate: GET failed with HTTP-ERROR: 404
Server Message : Could not parse server-response from json string

• The /opt/lgtonmc/gst/logs/gstd.raw has the following error:     

0 1506905469 2 0 0 3131729664 32427 0 nmc_server_hostname gstd NSR warning 85 Unable to get token for service account of NMC server from authentication service. %s 1 0 145 GET failed with HTTP-ERROR: 404Server Message : Could not parse server-response from json stringServer Message : Make sure that server is running

• All authentication attempts through NetWorker Management Console (NMC), NetWorker Web User Interface (NWUI), and nsrlogin prompt fail

There is an issue with the authentication database in the /nsr/authc/ directory. In this situation, the authentication port (default: 9090) may be up and respond to connection tests: 

nsrports -t authc_server_hostname -p 9090

1. Log in to the NetWorker server using SSH, and switch to the root user:

sudo su -

2. Stop NetWorker services on the authc server:

nsr_shutdown

3. Verify that the services have stopped:

ps -ef | grep nsr

4. Rename the authc directory:

mv /nsr/authc /nsr/authc_`date -I`

4. Run the following command to reconfigure authc: 

/opt/nsr/authc-server/scripts/authc_configure.sh

5. Startup networker service:

systemctl start networker

6. Log in to the NMC with the NetWorker Administrator account.​​​​​​

If following this process on a Windows NetWorker authentication server, there is no script to reconfigure the authentication service. On Linux hosts, the authentication service is configured post install. On Windows hosts, the authentication service is configured during install. This means that in order to reconfigure the authc database NetWorker must be uninstalled. After NetWorker has been uninstalled, rename the C:\Program Files\EMC NetWorker\nsr\authc-server directory. The path shown is the default installation path and may differ if NetWorker is installed in a non-default location. Once the authc-server folder has been renamed, reinstall NetWorker. During the install, the authc service creates a new authc database.