Unsolved
1 Message
0
1012
Not discovering remote array on new installed Solutions Enabler Host
Hi. We have installed a new SE host version 9.1 to manage 2 VMAX AFA running 5978.221.221
I'm not discovering the remote array (let's call it vmax2) (one is local (vmax1) and has several rdfg against the remote one).
It's weird because I've another solutions enabler (9.0) with vmax2 locally attached and it sees well both arrays.
- symsan shows each remotes ports ok.
- symrdf list shows rdf devs on both servers (on the new one they are showing in partitioned state, because of the "link failure" I guess).
- symrdf pings well on the old SE, not in the new one.
I've been taking a look to the storsrvd.log0 and there are two errors:
=============================================
[18770 Listener] Apr-15 18:06:48.088 : storsrvd Starting, Version: V9.1-2551 (0.5) [RT]
[18770 API_Listener] Apr-15 18:06:48.146 pdsSSLSetFileUsage #3033 : SSL_CTX_use_certificate_file() failed: [SSL Error: 0x140ad002 - error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib]
[18770 API_Listener] Apr-15 18:06:48.146 : ANR0142E Certificate establishment failed with rc=700004026 ([PDS/Sock] SSL object or attribute could not be set [SSL Error: 0x140ad002 - error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib])
[18770 API_Listener] Apr-15 18:06:48.146 : ANR0152E Issue detected with server certificate file /var/symapi/config/cert/symapisrv_cert_v9.0.pem
[18770 Listener] Apr-15 18:06:50.147 : storsrvd Exiting
[18770 Listener] Apr-15 18:06:50.147 :
=============================================
Taking a look to an old SE installation guide, it refers this:
ANR0142E
function establishment failed with rc= returncode (error_message)
Destination: Log. Description: During SSL initialization, the component referred to by function failed to be established. If function is CERTIFICATE or PRIVATE KEY, then the symapisrv_cert.pem file may be damaged or it may not have been successfully copied to the SYMAPI configuration directory.
Operator Action: If server certificate and key files are not installed by default on the platform where the server is running, additional installation steps are necessary. Refer to the platform specific installation instructions to install the files. You can specify NONSECURE for the security level if desired; in which case, the server will not attempt to load the certificate and key files.
ANR0152E
Issue detected with server certificate file filename Destination: Log.
Description: This message is issued during initialization of the secure library. A problem with the certificate file has been detected.
Operator Action: Check for the existence of the certificate file on the server. If you have set the security_alt_cert_file parameter in the daemon_options file, verify that it points to a valid file.
Looking at the daemon_options file, there are two lines (both commented):
# storsrvd:SECURITY_ALT_CERT_FILE = symapisrv_cert_v9.0.pem
# storsrvd:SECURITY_ALT_KEY_FILE = symapisrv_key_v9.0.pem
So should I use those certs?
any suggestion?
thanks!
DELL-Sam L
Moderator
Moderator
•
7K Posts
0
April 16th, 2020 16:00
Hello Telecom,
Are you using the Dell EMC Solutions Enabler Version 9.1 Installation and Configuration Guide? If not here is a link to the guide. I think your issue is resolved on page 200, as you may need to specify the server behavior. https://dell.to/2KdzlgQ
Please let us know if you have any other questions.