NVP-vProxy: Backup failed to disable storage migration with SSL Certificate error

Summary: The NetWorker VMware Protection (NVP) integration is configured with the vProxy Appliance. The virtual machine (VM) Backup failed to disable storage migration for virtual machine with VMware Virtual Disk Development Kit (VDDK) Error "1: Unknown error." ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

The backup session log shows:

YYYY-MM-DD HH:MM:SS INFO:   [75] Disabling storage migration of virtual machine ...
YYYY-MM-DD HH:MM:SS WARN:   [75] Error disabling storage migration:  VDDK Error: 1: Unknown error., retrying.
YYYY-MM-DD HH:MM:SS ERROR:  [75] Failed to disable storage migration for virtual machine "vm-47686": VDDK Error: 1: Unknown error.


The /opt/emc/vproxy/runtime/logs/vbackupd/vbackupd-vddk.log shows:

YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_PrepareForAccess: Prepare to access disk.
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_Connect: Establish connection.
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: Resolve host.
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO YYYY-MM-DD HH:MM:SS-07:00 error -[03176] [Originator@6876 sub=IO] HandshakeCb; <SSL(<io_obj p:0x00007f589401da58, h:14, <TCP 'VPROXY_IP_ADDRESS : 45566'>, <TCP 'VCENTER_IP_ADDRESS : 443'>>)>; error: N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO --> PeerThumbprint: 51:90:4F:AE:79:1B:93:12:CB:F1:40:B6:5B:E8:4A:90:F5:45:DD:10
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO --> ExpectedThumbprint: eb:29:e0:6f:35:3d:a1:72:50:6c:8e:ef:c1:b5:6d:df:b0:18:1c:0a
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO --> ExpectedPeerName: VCENTER_FQDN
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO --> The remote host certificate has these problems:
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO -->
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO --> * unable to get local issuer certificate)
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO --> [context]zKq7AVECAQAAABWX8QANLQAA5m4+bGlidm1hY29yZS5zbwAAr+ccAHldGwD+vRYAUPwpACKwKQAUsikAHvUrAJVvKwCYpysAz1E5AdqWAGxpYnB0aHJlYWQuc28uMAACbQEPbGliYy5zby42AA==[/context]
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO VixDiskLib: VixDiskLib_Connect: Failed to start session. Other error encountered: SSL Exception: Verification parameters:
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO PeerThumbprint: 51:90:4F:AE:79:1B:93:12:CB:F1:40:B6:5B:E8:4A:90:F5:45:DD:10
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO ExpectedThumbprint: eb:29:e0:6f:35:3d:a1:72:50:6c:8e:ef:c1:b5:6d:df:b0:18:1c:0a
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO ExpectedPeerName: VCENTER_FQDN
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO The remote host certificate has these problems:
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO
YYYY-MM-DD HH:MM:SS NOTICE: VDDK INFO * unable to get local issuer certificate at 4838.

Cause

The vCenter Certificates (Machine SSL Certificate, VMware Certificate Authority, STS Signing Certificate, etc.) were recently refreshed on the vCenter Server Appliance. The vProxy appliance has references to the old vCenter Certificate thumbprints and is unable to establish a connection.

Resolution

The vProxy appliances Guest operating system should be restarted in the environment to refresh the vCenter certificate. Here is a general overview of the steps:

  • Authenticate to the vSphere Web Client.
  • From the vSphere Web Client, select "Power > Restart Guest operating system" for the vProxy appliance.
  • Perform a test backup in the environment.

Additional Information

In some instances, the vProxy appliance must be re-registered from the NetWorker server using the nsradmin command-line utility:  000156072
Article Properties
Article Number: 000199076
Article Type: Solution
Last Modified: 18 Nov 2025
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.