vSphere Replication appliance fails to register with Error: "A General System Error Occurred"

Products

• VMware vSphere ESXi

Issue/Introduction

Symptoms:

• The following issue occurs while attempting to reconfigure an existing VR appliance or register vSphere replication for the first time on the vCenter server:
  
  ERROR Operation Failed
  A general system error occurred: Failed to register VRMS. 
  Operation ID: 30c032bc-8f68-45fb-a38b-cdeb9496e561
  
  
• lsdoctor -l output indicates a trust mismatch error 

####-##-##T##:##:## ERROR generateReport: default-first-site\IP_Address (SRM) found SSL Trust Mismatch: Please run python ls_doctor.py --trustfix option on this node.

Environment

vSphere Live Site Recovery (all versions)

Cause

The vCenter lookup service's SSL trust mismatch is the cause of the error.

• From the log /var/log/vmware/dr/drconfig.log,

com.vmware.vim.vmomi.client.exception.SslException:javax.net.ssl.SSLException:Certificatethumbprintmismatch,expected:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:48:53 but encountered:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:F5:CC or ##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:E6:7A
at com. vmware. vim. vmomi. client.common. impl. ResponseImpl. setError (ResponseImpl. java:265)
at com. vmware.vim. vmomi. client.http.impl.HttpExchangeBase.setResponseError (HttpExchangeBase.java:362)
at com. vmware.vim. vmomi. client.http. impl.HttpExchange. invokeWithinScope (HttpExchange.java: 59)
at com. vmware. vim. vmomi. core. tracing. NoopTracer$NoopSpan. runWithinSpanContext (NoopTracer. java:120)
at com. vmware.vim. vmomi. client.http. impl. TracingScopedRunnable. run (TracingScopedRunnable. java:17)
at com. vmware. vim. vmomi. client.http. impl.HttpExchangeBase.run (HttpExchangeBase.java:52)
at com. vmware. vim. vmomi. client.http. impl.HttpProtocolBindingBase.executeRunnable (HttpProtocolBindingBase.java:229)
at com. vmware.vim. vmomi. client.http. impl.HttpProtocolBindingImpl.send(HttpProtocolBindingImpl.java: 128)
at com. vmware. vim. vmomi. client. common. impl.MethodInvocationHandlerImp1$CallExecutor.sendCall (MethodInvocationHandlerImpl. java: 693)
at com. vmware. vim. vmomi. client. common. impl. MethodInvocationHandlerImpl$CallExecutor.executeCall (MethodInvocationHandlerImpl. java: 674)
at com. vmware. vim. vmomi. client.common. impl.MethodInvocationHandlerImpl.completeCall (MethodInvocationHandlerImpl.java: 371)
at com. vmware. vim. vmomi. client. common. impl. MethodInvocationHandlerImpl. invokeOperation (MethodInvocationHandlerImpl. java: 322)
at com. vmware. vim. vmomi. client.common. impl.MethodInvocationHandlerImpl. invoke (MethodInvocationHandlerImpl. java: 195)
Caused by :javax.net.ssl.SSLException:Certificatethumbprintmismatch,expected:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:48:53 but encountered:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:F5:CC or ##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:##:E6:7A

• The SSL trustfix issue caused by the certificate thumbprint mismatch prevents the vSphere replication server from configuring.

Resolution

1. Take a snapshot of the vCenter Server.
   Note: If the vCenter Server is part of a linked mode setup, ensure that the snapshot is taken while the server is powered off (offline snapshot).
   
   

2. To use lsdoctor, you must download the ZIP file attached to this article.  Then, use the file-moving utility of your choice (WinSCP for example) to copy the entire ZIP directory to the node on which you wish to run it.

   NOTE:  If you have troubles connecting to a vCenter appliance using WinSCP, please see Error when uploading files to vCenter Server Appliance using WinSCP
   Once the tool is copied to the system, unzip the file:
   VCSA
   Change your directory to the location of the file, and run the following command:
   $ unzip lsdoctor.zip

3. Run the lsdoctor script with the -l and -t options. Refer to this document for lsdoctor Using the 'lsdoctor' Tool

4. Reconfigure from VAMI page. Refer to this document for reconfiguration  Reconfiguring the Site Recovery Manager Virtual Appliance

Additional Information

Refer Using the 'lsdoctor' Tool