srm-server service is not running.

Products

• VMware Live Recovery
• VMware Site Recovery Manager 8.x

Issue/Introduction

Symptoms:

• When the SSL certificate on the vCenter is updated, thumbprint changes.
  
  
• Unable to reconfigure the SRM due to SSL certificate change, takes long time and times out to login page.

Manually started srm-server service from VAMI, gives an error as : A general system error occurred:N7Vmacore3Ssl18SSLVerifyExceptionE 
SSL Exception: Verification parameters:
PeerThumbprint:01:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:89:AB:CD:EF
ExpectedThumbprint: FE:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:76:54:32:10
ExpectedPeerName: vCenter.local.com. The remote host certificate has these problems:
unable to get local issuer certificate.
Operation ID: #######-####-####-####-##########

Validation:

• In SRM, /opt/vmware/support/logs/srm/vmware-dr.log, log indicates certificate mismatch problem:

2024-04-08T13:44:57.599-07:00 info vmware-dr[92978] [SRM@6876 sub=IO.Http] Set user agent error; state: 1, (null), N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
--> PeerThumbprint: 01:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:89:AB:CD:EF
--> ExpectedThumbprint: FE:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:76:54:32:10
--> ExpectedPeerName: vCenter.local.com
--> The remote host certificate has these problems:
--> 
--> * unable to get local issuer certificate)
--> [context]zKq7AVECAAQAAMX4YgELdm13YXJlLWRyAADM6xtsaWJ2bWFjb3JlLnNvAACkbjMAmV0zAGkEMwAgIDMA9iEzAN5INQDiYTUAsItKAbCOAGxpYnB0aHJlYWQuc28uMAAC7/oPbGliYy5zby42AA==[/context]
2024-04-08T13:44:57.601-07:00 error vmware-dr[92978] [SRM@6876 sub=IO.Http] User agent failed to send request; (null), N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
--> PeerThumbprint: 01:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:89:AB:CD:EF
--> ExpectedThumbprint: FE:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:76:54:32:10
--> ExpectedPeerName: vCenter.local.com
--> The remote host certificate has these problems:
--> * unable to get local issuer certificate)xx

Environment

• VMware Site Recovery Manager 8.x
  
  
• VMware Live Site Recovery 9.0.2, 9.0.4

Cause

The reconfiguration handshake fails, and the new thumbprint cannot be registered due to a mismatch. This issue is often caused by incorrect thumbprints in the SRM database tables.

 

Resolution

• Perform a power cycle of the SRM appliance and proceed with the reconfiguration.

If the issue persists after the power cycle please contact Broadcom Support to investigate further.