While configuring SRM in Aria Orchestrator, gets error message "One or more certificates in the chain are not valid. Error: Path does not chain with any of the trust anchors"
Article ID: 400132
Updated On:
Products
Issue/Introduction
While configuring SRM in Aria Orchestrator, it gives out error
2025-05-20 11:35:25.113 -05:00WARNING One or more certificates in the chain are not valid.
Error: Path does not chain with any of the trust anchors
Certificate chain details:
Validity : [From : Aug 19, 2022 To : Aug 18, 2027]
Common Name (6 characters min) : <FQDN of SRM>
Organization : <Organization ID>
Fingerprint (MD5) : <Fingerprint>
Public key : RSA
Environment
Aria Orchestrator 8.18.1.
VMware Site Recovery Manager 9.1
SRM server is using Self Signed certificate
Cause
The error message indicates there is a problem with the trust chain of the SRM's SSL/TLS certificate
Resolution
1. Verify the vCenter certificate is good, by running the command from ssh session on the Automation/Orchestrator node:
echo -n | openssl s_client -connect <vc-fqdn>:443 -showcerts | tac | sed -ne '1,/-BEGIN CERTIFICATE-/p' | tac | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' | tee -a vCentercertificate.crt
Examine the output and validate the certificate.
2. Take a snapshot of Aria Orchestrator appliance before following running the troubleshooting steps below.
a. Select the SRM Endpoint from Aria Orchestrator ui from under the list Plugins from under the Inventory:
b. Check and Validate the SRM server self-signed certificate.
c. On the Orchestrator-ui, and select the
Administration > Inventory > SRM to verify the error message is gone.
Feedback
