Symptoms:
On the affected site, we do not see all host based replication servers from the 'Replication Servers' tab in SRM UI.
The scale-out-mode is set to true in /opt/vmware/hms/conf/hms-configuration.xml.
/opt/vmware/hms/logs/hms.log:
2025-03-27 18:23:23.414 INFO com.vmware.hms.net.hbr.ping.svr.5d6676e7-dc9a-42b1-b730-80917fc44e01 [hms-main-thread-48] (..net.impl.PersistentConnection) [task=HTID-d131318f-1803-425e-aa10-f466669c5b95] | Started pinging server ##.##.##.##:443/hbr for session key: N/A
2025-03-27 18:23:23.414 ERROR com.vmware.hms.remote.SiteManager [hms-main-thread-48] (..hms.remote.SiteManagerImpl) [task=HTID-d131318f-1803-425e-aa10-f466669c5b95] | Unable to register VR Server vm '###.###.###.###' uri 'https://##.##.##.##:443/hbr' thumbprint '##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##.##'
com.vmware.vim.binding.hms.remote.fault.ConnectionFault: Cannot start connection to VR Server https://XXX.XXX.XXX.XXX:443/hbr: javax.net.ssl.SSLException: SSL handshake from 0.0.0.0/0.0.0.0:47846 to /##.##.##.##:443 failed in 3 ms
at com.vmware.hms.remote.SiteManagerImpl.registerHbrServerWithTask(SiteManagerImpl.java:704) ~[hms.jar:?]
at com.vmware.hms.remote.SiteManagerImpl$3.go(SiteManagerImpl.java:551) ~[hms.jar:?]
at com.vmware.hms.task.TaskRunnable.run(TaskRunnable.java:86) ~[hms.jar:?]
at com.vmware.hms.HmsTaskManager.lambda$0(HmsTaskManager.java:253) ~[hms.jar:?]
at com.vmware.hms.util.executor.LoggerOpIdConfigurator$RunnableWithDiagnosticContext.run(LoggerOpIdConfigurator.java:132) ~[hms.jar:?]
at com.vmware.hms.util.executor.LoggerOpIdConfigurator$2.run(LoggerOpIdConfigurator.java:99) ~[hms.jar:?]
at com.vmware.jvsl.sessions.net.impl.TlsPreservingWrapper$2.run(TlsPreservingWrapper.java:47) ~[jvsl-sessions-9.0.2.jar:?]
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) ~[?:?]
at java.lang.Thread.run(Unknown Source) [?:?]
2025-03-27 18:23:23.414 DEBUG com.vmware.hms.phcollector.ops.VrOperationsSender [hms-main-thread-78] (..phcollector.ops.VrOperationsSender) [] | handleHmsTaskFinishedEvent[id: HTID-d131318f-1803-425e-aa10-f466669c5b95; taskName: Register hbrsrvuw from host-XX; taskManagedEntityId: null; taskTypeId: RegisterHbrTask; requestedExecutorId: hbr-management; taskTag: hbrsrvuw-reg-host-XX--id--########-####-####-####-###########; autoAbort: true; queueTime: 1743099803383; startTime: 1743099803393; completeTime: null; error: Cannot start connection to VR Server https://##.##.##.##:443: javax.net.ssl.SSLException: SSL handshake from 0.0.0.0/0.0.0.0:47846 to /##.##.##.##:443 failed in 3 ms; success: false; result: null]
2025-03-27 18:23:23.414 INFO com.vmware.hms.hbrsrvuw.HbrsrvuwRegistrarService [hms-main-thread-39] (..hms.hbrsrvuw.HbrsrvuwRegistrarService) [] | handleHmsTaskFinishedEvent: [host-XX][########-####-####-####-###########]: HmsTaskFinishedEvent[id: HTID-d131318f-1803-425e-aa10-f466669c5b95; taskName: Register hbrsrvuw from host-40; taskManagedEntityId: null; taskTypeId: RegisterHbrTask; requestedExecutorId: hbr-management; taskTag: hbrsrvuw-reg-host-XX--id--########-####-####-####-###########; autoAbort: true; queueTime: 1743099803383; startTime: 1743099803393; completeTime: null; error: Cannot start connection to VR Server https://##.##.##.##:443: javax.net.ssl.SSLException: SSL handshake from 0.0.0.0/0.0.0.0:47846 to /##.##.##.##:443 failed in 3 ms; success: false; result: null]
2025-03-27 18:23:23.414 ERROR com.vmware.hms.hbrsrvuw.HbrsrvuwRegistrarService [hms-main-thread-39] (..hms.hbrsrvuw.HbrsrvuwRegistrarService$HostTask) [] | Register hbrsrvuw from host-XX...FAILED (HTID-d131318f-1803-425e-aa10-f466669c5b95); will retry
com.vmware.vim.binding.hms.remote.fault.ConnectionFault: Cannot start connection to VR Server https://##.##.##.##:443/hbr: javax.net.ssl.SSLException: SSL handshake from 0.0.0.0/0.0.0.0:47846 to /##.##.##.##:443 failed in 3 ms
VMware vSphere Replication 8.x
VMware vSphere Replication 9.x
Port # 443 must be open between the components as mentioned.
|
vSphere Replication
server in the
vSphere Replication
appliance |
Local
ESXi
host (intra-site) |
443
|
HTTP
|
Traffic between the
vSphere Replication
server and the
ESXi
hosts on the same site. |
|
Local
ESXi
host (intra-site) |
vSphere Replication
server in the
vSphere Replication
appliance |
443
|
HTTP
|
Traffic between the
ESXi
hosts and the
vSphere Replication
server on the same site. |
Ensure Port # 443 is open on the firewall between the components documented in Services, Ports, and External Interfaces That the vSphere Replication Virtual Appliance Uses
Ports Used by the vSphere Replication Appliance
https://techdocs.broadcom.com/us/en/vmware-cis/live-recovery/vsphere-replication/9-0/vmware-vsphere-replication-security-guide-9-0/vsphere-replication-security-reference/services-ports-and-external-interfaces-that-the-vsphere-replication-virtual-appliance-uses.html