How to retrieve SSL Certificates for Site Recovery Manager (SRM)

Products

• VMware Live Recovery

Issue/Introduction

This article provides information on how to retrieve the relevant information to troubleshoot SSL certificates issues with VMware vCenter Site Recovery Manager (SRM). The main objective is to explain where to find the SRM SSL certificates in the Windows server where SRM is installed, so you can check the SSL Fields.

Note: SSL certificate mismatch issues can occur when the certificate is changed on the vCenter Server or the server where SRM is installed.

Environment

VMware vCenter Site Recovery Manager 5.8.x
VMware vCenter Site Recovery Manager 4.0.x
VMware vCenter Site Recovery Manager 5.5.x
VMware vCenter Site Recovery Manager 4.1.x
VMware vCenter Site Recovery Manager 5.0.x
VMware vCenter Site Recovery Manager 5.1.x

Cause

Resolution

To access the SSL certificates for SRM:

1. Log in to the Windows Server that the SRM service installed, with an Administrator account
2. Click the Start button and type mmc
3. Click File
4. Click Add/Remove Snap-in
5. From the left pane, select Certificates and click Add to add it to the right pane
6. On the next screen, you are prompted for details of what you want the snap-in to manage certificates for, select "Service account" and click Next
7. Leave the default option Local computer selected and click Next
8. Select VMware vCenter Site Recovery Manager Server from the list and click Finish
9. Click OK to finish

Examine the SRM SSL certificates and retrieve the SSL Fields:

1. To examine the individual fields within, double click on the certificate entry in the middle pane
2. To retrieve the Version 1 fields, go to Details and Subject
   
   Now you can view the Common Name (CN), Organizational Unit (OU) and Organization (O) fields.
   
   
3. Compare the extracted fields from the vCenter and SRM certificates. The certificates of vCenter Server and both SRM servers must match

Additional Information

For more information about SSL certificate requirements in SRM, see Requirements when using trusted certificates with VMware Site Recovery Manager 1.0.x/4.0.x/4.1.x/5.x (1008390).

Requirements when using trusted certificates with VMware Site Recovery Manager 1.0.x to 5.0.x