Signed certificate was installed using AUI which changed MCSSL cert to signed cert.
Note: This KB article is applicable for Avamar 19.2.x and 18.2.x only. This article should not be applied to previous Avamar versions.
If MCSSL certificate is changed to a signed certificate, (see KB article 540434:
Avamar 19.2: How to install CA Signed certificate using AUI), remote MCCLI server stopped working with below error:
1,23996,CLI failed to connect to MCS.
Attribute Value
--------- -------------------------------------------------------------------------------------------------------------------------------------------------
reason FIPS 140-2 mode is not supported on Java 7. Please install supported version of Java on the client machine, or turn off this mode on the server.
option non-JRMP server at remote endpoint
Remote MCCLI server does not contain correct chain certs (root and intermediate cert) for Avamar server.
- Log in to remote MCCLI server and switch to MCCLI install directory. For example:
cd /usr/local/avamar/19.2.0-155/lib
- Take backup copy of existing rmi_ssl_keystore:
cp -p rmi_ssl_keystore rmi_ssl_keystore-orig
- Import Chain certs which contain root and intermediate certs for CA (assuming you have received ca.crt from CA):
keytool -importcert -file ca.crt -alias rootcert -keystore /usr/local/avamar/19.2.0-155/lib/rmi_ssl_keystore -storepass changeme
- Try MCCLI command from remote MCCLI server to test. It should work now.
This content is translated in 17 languages:
https://downloads.dell.com/TranslatedPDF/CS_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/DA_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/DE_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/ES-XL_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/FI_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/FR_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/IT_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/JA_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/KO_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/NL_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/NO-NO_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/PL_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/PT-BR_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/RU_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/SV_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/TR_KB540989.pdf |
https://downloads.dell.com/TranslatedPDF/ZH-CN_KB540989.pdf |