NetWorker: After applying a CA signed certificate, NMC gstd fails to start error: SYSTEM critical Failed to verify certificate
Summary: NMC gstd fails after applying CA signed key Error: gstd SYSTEM critical Failed to verify certificate in D:\Program Files\EMC NetWorker\Management\GST\etc\cakey.pem.
Symptoms
- The NetWorker Management Console (NMC) is inaccessible.
- The NMC server's gstd service fails to start with an error in the gstd.raw:
Error: gstd SYSTEM critical Failed to verify certificate in C:\Program Files\EMC NetWorker\Management\GST\etc\cakey.pem.
- Linux:
/opt/lgtonmc/logs/gstd.raw - Windows:
C:\Program Files\EMC NetWorker\Management\GST\logs\gstd.raw
NetWorker: How to use nsr_render_log to render .raw log files
Cause
The cakey.pem generated incorrectly.
Linux NMC Server:
The cakey.pem includes the Server private key + CA-signed server certificate.
The Server private key + root CA certificate + Intermediate CA certificates (if used) + CA-signed server certificate are required.
Windows NMC Server:
The cakey.pem includes the Server private key + root CA certificate + Intermediate CA certificates (if used) + CA-signed server certificate.
Only the Server private key and CA-signed server certificate are required.
Resolution
The process for replacing self-signed NMC certificates with CA signed certificates is detailed in:
NetWorker: How to Import or Replace Certificate Authority Signed Certificates for NMC
Additional Information
NetWorker: How to Import or Replace Certificate Authority Signed Certificates for "Authc" and "NWUI" (Linux)
NetWorker: How to Import or Replace Certificate Authority Signed Certificates for "Authc" and "NWUI" (Windows)
NetWorker: NMC GST service starts then immediately shuts down after replacing cakey.pem