Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

PowerProtect Data Manager 19.14 Administrator Guide

PDF

Troubleshooting failed replication jobs

The following section provides troubleshooting information for when a replication job fails.

Replication to a DD system fails with an authentication error

A replication job might fail with the following error: 

The backup copies cannot be replicated because the username and password for the source storage system are not valid or cannot be detected.

This failure might happen intermittently, while most backup and replication jobs complete without failure and DD systems are successfully discovered.

To resolve this issue, perform the following steps:

  1. Collect a DD support bundle and search /ddvar/log/messages for Failed password or Invalid user.
    NOTE:For instructions on collecting the support bundle, see the DDOS Administration Guide.
  2. If the search text is found, you see entries similar to the following: 
    Oct 15 16:36:26 <DD hostname> sshd[25116]: Failed password for sysadmin from <IP address> port 55351 
Oct 11 11:18:00 <DD hostname> sshd[31750]: Invalid user <username> from <IP address> port 64425
  3. Locate the asset-source host using <IP address> and correct the credentials that it is using to connect to the DD system.

Replication to a DD system fails with a certificate error

A replication job might fail with an error similar to the following: 

error = I/O error on POST request for "https://<DD-System>:3009/rest/v1.0/auth": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path
NOTE:In this example, <DD_System> is replaced by the hostname of the replication DD system.

This error indicates that the certificate stored on PowerProtect Data Manager for the DD system has expired, been corrupted, or is missing.

To regenerate the certificate, perform the following steps:

  1. If necessary, contact Customer Support to obtain the ppcp tool.
    NOTE:The ppcp tool is not deployed with PowerProtect Data Manager. It must be obtained separately.
  2. Log in to the PowerProtect Data Manager server console using administrator credentials and change to the root user.
  3. Change directories to the location of the ppcp tool.
  4. Run the command ./ppcp rest --uri certificates --params "host=<DD_System>&port=3009&type=HOST", replacing <DD_System> with the hostname of the DD system.
  5. In the command output similar to the following, record the value of id inside quotation marks immediately after "id": 
    "fingerprint":"473303EFF3EFE6D6AAC2D76F1FB94561B12A321F","host":"<DD_System>","id":"ZG1vYmstcGRiMDAwMS1wLmQuaW50LmluZnJhLjdhbmRpLmNvLmpwOjMwMDk6aG9zdA==","issuerName":"CN=<DD_System>, OU=Root CA, O=Valued Datadomain Customer, L=Santa Clara, ST=CA, C=US","notValidAfter":"Sun Dec 07 15:28:39 JST 2025","notValidBefore":"Mon Dec 09 00:28:39 JST 2019","port":"3009","state":"UNKNOWN","subjectName":"CN=<DD_System>, O=Valued DataDomain customer, OU=Host Certificate, ST=CA, C=US","type":"HOST"
    NOTE:In this example, the value of id is ZG1vYmstcGRiMDAwMS1wLmQuaW50LmluZnJhLjdhbmRpLmNvLmpwOjMwMDk6aG9zdA==
  6. Run the following command to change the state of the certificate from UNKNOWN to ACCEPTED:
    • Use the value of id recorded in step 5. The value of id is entered immediately after certificates/.
    • With the exception of changing UNKNOWN to ACCEPTED, copy the output of the command from step 4 between { and }.
    • Replace <DD_System> with the hostname of the DD system.
    • This command is entered on a single line of text. 
    ./ppcp rest --method PUT --uri certificates/ZG1vYmstcGRiMDAwMS1wLmQuaW50LmluZnJhLjdhbmRpLmNvLmpwOjMwMDk6aG9zdA== --data '{"fingerprint":"473303EFF3EFE6D6AAC2D76F1FB94561B12A321F","host":"dmobk-pdb0001-p.d.int.infra.7andi.co.jp","id":"ZG1vYmstcGRiMDAwMS1wLmQuaW50LmluZnJhLjdhbmRpLmNvLmpwOjMwMDk6aG9zdA==","issuerName":"CN=dmobk-pdb0001-p.d.int.infra.7andi.co.jp, OU=Root CA, O=Valued Datadomain Customer, L=Santa Clara, ST=CA, C=US","notValidAfter":"Sun Dec 07 15:28:39 JST 2025","notValidBefore":"Mon Dec 09 00:28:39 JST 2019","port":"3009","state":"ACCEPTED","subjectName":"CN=dmobk-pdb0001-p.d.int.infra.7andi.co.jp, O=Valued DataDomain customer, OU=Host Certificate, ST=CA, C=US","type":"HOST"}'

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\