srm-server service is not running.

Products

VMware Live Recovery VMware Site Recovery Manager 8.x

Issue/Introduction

Symptoms:

When the SSL certificate on the vCenter is updated, thumbprint changes.
Unable to reconfigure the SRM due to SSL certificate change, takes long time and times out to login page.
Manually started srm-server service from VAMI, gives an error as : A general system error occurred:N7Vmacore3Ssl18SSLVerifyExceptionE
SSL Exception: Verification parameters:
PeerThumbprint:01:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:89:AB:CD:EF
ExpectedThumbprint: FE:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:76:54:32:10
ExpectedPeerName: vmwarexx.local.com. The remote host certificate has these problems:
unable to get local issuer certificate.
Operation ID: #######-####-####-####-##########

Validation:

In SRM, /opt/vmware/support/logs/srm/vmware-dr.log, log indicates certificate mismatch problem:

2024-04-08T13:44:57.599-07:00 info vmware-dr[92978] [SRM@6876 sub=IO.Http] Set user agent error; state: 1, (null), N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
--> PeerThumbprint: 01:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:89:AB:CD:EF
--> ExpectedThumbprint: FE:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:76:54:32:10
--> ExpectedPeerName: vmwareVC01.local.com
--> The remote host certificate has these problems:
--> 
--> * unable to get local issuer certificate)
--> [context]zKq7AVECAAQAAMX4YgELdm13YXJlLWRyAADM6xtsaWJ2bWFjb3JlLnNvAACkbjMAmV0zAGkEMwAgIDMA9iEzAN5INQDiYTUAsItKAbCOAGxpYnB0aHJlYWQuc28uMAAC7/oPbGliYy5zby42AA==[/context]
2024-04-08T13:44:57.601-07:00 error vmware-dr[92978] [SRM@6876 sub=IO.Http] User agent failed to send request; (null), N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters:
--> PeerThumbprint: 01:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:89:AB:CD:EF
--> ExpectedThumbprint: FE:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:76:54:32:10
--> ExpectedPeerName: vmwarexx.local.com
--> The remote host certificate has these problems:
--> * unable to get local issuer certificate)xx

Environment

VMware Site Recovery Manager 8.x
VMware Site Recovery Manager 9.x

Cause

The reconfiguration handshake fails, and the new thumbprint cannot be registered due to a mismatch. This issue is often caused by incorrect thumbprints in the SRM database tables.

Resolution

Perform a power cycle of the SRM appliance and proceed with the reconfiguration.

If the issue persists after the power cycle please contact Broadcom Support to investigate further.