Avamar:客户端或代理注册失败,并显示 avagent 错误 <41044>:证书的有效期从“x”到“x”

Summary: Avamar:客户端或代理注册失败并显示 avagent 错误 <41044>:证书的有效期为“x”到“x”。

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

尝试注册客户端或代理时,avagent.log中报告以下错误

avagent Error <41044>: Certificate is valid from 'Feb 20 18:37:47 2018 GMT' to 'Feb 19 18:37:47 2023 GMT

Cause

当 Avamar 的根 CA 过期时,会发生这种情况。可以使用以下命令查看证书和到期日期:

keytool -list -v -keystore /usr/local/avamar/lib/avamar_keystore -storepass $(avlockbox.sh -r keystore_passphrase)


在示例通知中,“Valid from”行显示与avagent.log匹配的到期日期:

Keystore type: PKCS12
Keystore provider: JsafeJCE

Your keystore contains 3 entries

Alias name: mcrsatls
Creation date: Dec 14, 2021
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=avamar.host.com, CN=Avamar Server RSA TLS, OU=BRS Division, O=                                                                                                                                                             EMC Corp, L=Irvine, ST=California, C=US
Issuer: CN=avamar.host.com, OU=BRS Division, O=EMC Corp, L=Irvine, ST=Ca                                                                                                                                                             lifornia, C=US
Serial number: defcca81e2fc62a2
Valid from: Tue Feb 20 13:37:47 EST 2018 until: Sun Feb 19 13:37:47 EST 2023
Certificate fingerprints:
        SHA1: D8:D2:2B:32:2E:FD:F8:BC:0F:F1:EB:E6:F9:46:F5:04:32:B5:65:82
        SHA256: 22:4F:AA:D0:9B:AC:E7:28:E3:CF:F4:7D:D4:BD:D5:E6:21:3D:5C:AD:FC:                                                                                                                                                             06:71:05:DD:1D:57:68:57:41:80:D4
Signature algorithm name: SHA512withRSA
Subject Public Key Algorithm: 3072-bit RSA key
Version: 3


*******************************************
*******************************************


Alias name: mcecroot
Creation date: Dec 14, 2021
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=avamar.host.com, OU=BRS Division, O=EMC Corp, L=Irvine, ST=Cal                                                                                                                                                             ifornia, C=US
Issuer: CN=avamar.host.com, OU=BRS Division, O=EMC Corp, L=Irvine, ST=Ca                                                                                                                                                             lifornia, C=US
Serial number: 8a03abfb38cfe938
Valid from: Tue Feb 20 13:37:46 EST 2018 until: Sun Feb 19 13:37:46 EST 2023
Certificate fingerprints:
        SHA1: 15:1A:3C:FF:78:0B:B8:8A:01:96:28:B6:1D:A4:74:E9:8C:C7:17:35
        SHA256: BB:96:7B:87:E1:E3:55:82:4D:20:4D:7C:2A:3B:DF:D1:8D:34:C0:E0:12:                                                                                                                                                             B1:F9:01:5B:5F:9B:35:C1:B7:97:30
Signature algorithm name: SHA512withECDSA
Subject Public Key Algorithm: 384-bit EC key
Version: 3


*******************************************
*******************************************


Alias name: mcrsaroot
Creation date: Dec 14, 2021
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=avamar.host.com, OU=BRS Division, O=EMC Corp, L=Irvine, ST=Cal                                                                                                                                                             ifornia, C=US
Issuer: CN=avamar.host.com, OU=BRS Division, O=EMC Corp, L=Irvine, ST=Ca                                                                                                                                                             lifornia, C=US
Serial number: b0e0f2bbf52f6905
Valid from: Tue Feb 20 13:37:47 EST 2018 until: Sun Feb 19 13:37:47 EST 2023
Certificate fingerprints:
        SHA1: FF:69:3F:46:13:15:6D:35:2D:AD:16:93:F7:A1:25:69:7F:69:7E:27
        SHA256: 98:28:85:1D:F9:81:A8:E4:1F:30:A0:70:9B:C5:E2:9D:12:57:B8:09:A7:                                                                                                                                                             EF:46:23:72:DE:CC:31:05:6A:AB:8B
Signature algorithm name: SHA512withRSA
Subject Public Key Algorithm: 3072-bit RSA key
Version: 3


*******************************************
*******************************************

Resolution

按照文章 000067229下载适用于您正在运行的 Avamar 版本的会话安全配置 avp。运行软件包并选中复选框以生成所有新证书,如下面的屏幕截图所示。

Avamar Installation Manager

Affected Products

Avamar
Article Properties
Article Number: 000211737
Article Type: Solution
Last Modified: 21 Jul 2025
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.