Unable to connect to Lookup Service at https://####:443/lookupservice/sdk. Reason: javax.net.ssl.SSLException: Certificate thumbprint mismatch

Products

• VMware Live Recovery

Issue/Introduction

Symptoms:

• Error while launching Site Recovery page from the vCenter.

Unable to connect to Lookup Service at https://####:443/lookupservice/sdk. Reason: javax.net.ssl.SSLException: Certificate thumbprint mismatch

• The error may occur if the vCenter server on one site is restored from backup.

Environment

VMware Site Recovery Manager 8.x
VMware Live Site Recovery 9.x

Cause

• Incorrect thumbprint entry of the vCenter server certificate in SRM Database tables.
  
  
• SRM /opt/vmware/support/logs/srm/vmware-dr.log will show the Peer Thumbprint and Expected Thumbprint is different.
  
  "SSL Exception: Verification parameters:
--> PeerThumbprint: XX:XX:XX:XX:XX:XX:XX
--> ExpectedThumbprint: XX:XX:XX:XX:XX:ZZ
--> The remote host certificate has these problems:
-->
--> * unable to get local issuer certificate"
• The above error message indicates that the SRM database contains old thumbprint of the VC on one site in some SRM Database tables where paired site VC information is stored.

 

 

Resolution

If the above symptoms and issue match, please contact Broadcom Support to investigate the issue.