Avamar: Remote Mccli Command Fails After Upgrade to Java Higher Than 1.8.0_481

Summary: This article explains the failure of remote mccli commands after upgrading Java to version 1.8.0_492 and provides a workaround to restore functionality.

Bu makale şunlar için geçerlidir: Bu makale şunlar için geçerli değildir: Bu makale, belirli bir ürüne bağlı değildir. Bu makalede tüm ürün sürümleri tanımlanmamıştır.

Symptoms

The remote mccli commands fail to connect to MCS after upgrade to Java higher than 1.8.0_481 version on the remote server.

Working version of Java on remote mccli server:

root@remote-linux:~/>: java -version
openjdk version "1.8.0_472"
OpenJDK Runtime Environment (build 1.8.0_472-b08)
OpenJDK 64-Bit Server VM (build 25.472-b08, mixed mode)
root@remote-linux:~/>:

Once upgrade the Java version higher than 1.8.0_481:

root@remote-linux:~/>: java -version
openjdk version "1.8.0_492"
OpenJDK Runtime Environment (build 1.8.0_492-b09)
OpenJDK 64-Bit Server VM (build 25.492-b09, mixed mode)
root@remote-linux:~/>:  
root@remote-linux:~/>:  ./mccli server show-prop
1,23996,CLI failed to connect to MCS.
Attribute Value
--------- -------------------------------------------------------------------------------------------------------------------------------------------------
reason    FIPS 140-2 mode is not supported on Java 7.  Please install supported version of Java on the client machine, or turn off this mode on the server.
option    non-JRMP server at remote endpoint
root@remote-linux:~/>:
The /usr/local/avamar/var/mc/server_log/mcserver.log.0 shows:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:05.00969 [RMI TCP Connection(504846)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504846)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00011 [RMI TCP Connection(504847)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504847)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00094 [RMI TCP Connection(504848)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504848)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00127 [RMI TCP Connection(504849)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504849)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00156 [RMI TCP Connection(504850)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504850)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00174 [Web Services monitor thread#186] com.avamar.mc.dpn.ExecuteCommand.createTimer
FINE: Creating timer for com.avamar.mc.mon.WebServicesMonitor
05/07-13:38:06.00216 [RMI TCP Connection(504851)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504851)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Fatal Alert received: Certificate Unknown
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:750)
05/07-13:38:06.00220 [RMI TCP Connection(504852)-192.168.1.113#10954236] sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0
FINE: RMI TCP Connection(504852)-192.168.1.113: terminated with exception:
javax.net.ssl.SSLException: Ciphertext is too large in received TLS record
    at com.rsa.sslj.x.aI.b(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.aI.a(Unknown Source)
    at com.rsa.sslj.x.ap.c(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.ap.b(Unknown Source)
    at com.rsa.sslj.x.al.read(Unknown Source)
    at java.io.BufferedInputStream.fill(BufferedInputStream.java:246)
    at java.io.BufferedInputStream.read(BufferedInputStream.java:265)
    at java.io.DataInputStream.readInt(DataInputStream.java:387)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(TCPTransport.java:727)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.lambda$run$0(TCPTransport.java:688)
    at java.security.AccessController.doPrivileged(Native Method)
    at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(TCPTransport.java:687)

Cause

Changes introduced in Java versions higher than 1.8.0_481 affect this functionality. Engineering is investigating this issue.

Resolution

Follow the guidance from the article Avamar: Unable to Launch Avamar Administrator JNLP with Java 1.8.0_481 to implement the workaround setting the parameter rmi_over_ssl to false in the file /usr/local/avamar/var/mc/server_data/mcserver.xml and then restart the Management Console Service (MCS).

Etkilenen Ürünler

Avamar
Makale Özellikleri
Article Number: 000466865
Article Type: Solution
Son Değiştirme: 19 May 2026
Version:  2
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.