Management centers on failover were deployed using different serial numbers.
Management Centers appliances are running version 18.104.22.168
Prior 22.214.171.124 upgrade, Management centers were running version 3.1.3.x or 3.1.4.x and were configured as failover.
There are NO other Management Center deployed using same serial number in another server.
MC is able to access internet and validate.es.bluecoat.com
Management Center hardware devices may show "Invalid License".
Management Center 3.1.3.x or 3.1.4.x acting as secondary may incorrectly replicate bluecoat-appliance certificate of the primary.
This was a bug on 3.1.3.x and 3.1.4.x.
Management centers were running 3.1.3 or 3.1.4.x and were configured as failover
If not yet disabled, disable the failover on both units, then refetch/ reinstall the license and re enable back the failover.
licensing load username <your broadcom portal username> password (hit enter on your keyboard to be prompted to type in your password)
**Note: You should see an OK message after the command above**
Verify that you are seeing the serial number of the unit under Subject's CN field of bluecoat-appliance keyring
mc-11# show ver
Symantec Management Center release 126.96.36.199 (265101)
Serial number: 0011223344
NIC 0 MAC: 000c29d407e5
mc-11# show ssl keyring bluecoat-appliance
Keyring ID: bluecoat-appliance
Private key showability: show
Signing request: absent
Certificate subject: C=US,ST=California,O=Blue Coat Systems, Inc.,OU=BlueCoat SGVA Series,CN=0011223344
Certificate issuer: C=US,ST=California,L=San Jose,O=Broadcom Inc.,OU=ABRCA,CN=Virtual Appliance Birth Certificate Intermediate CA
Certificate valid from: Jun 23 05:46:04 2021 GMT
Certificate valid to: Jun 24 12:46:04 2026 GMT
Certificate thumbprint: 15:E3:91:7C:7D:3F:77:1F:70:03:4B:48:9F:E6:07:BC:1A:88:B9:62
Fetching the license (e.g. licensing load <with credentials>) is needed once you are in 3.2.x
Once birth certificate is correct, the fix in 3.2.x should prevent the birth certificate to be replicated on failover.