Site Recovery Manager (VLSR) plugin is missing from vCenter Home menu - Certificate doesn't match any of the subject alternative names
search cancel

Site Recovery Manager (VLSR) plugin is missing from vCenter Home menu - Certificate doesn't match any of the subject alternative names

book

Article ID: 402170

calendar_today

Updated On:

Products

VMware Live Recovery

Issue/Introduction

Site Recovery plugin is missing from vCenter 

vCenter cannot download the SRM plugin due to certificate errors 

Environment

VMware Live Site Recovery 9.x 
VMware vCenter Server 8.x

Cause

There are 2 possible reasons for this error -

1. vCenter cannot reach the SRM appliance using its shortname [broadcom]



2. The error "Certificate for <host> doesn't match any of the subject alternative names" indicates a mismatch between the hostname assigned to the SRM appliance (FQDN) and the Subject Alternative Names (SANs) listed in the SSL certificate of the appliance (short name)


vsphere_client_virgo.log: 

[2025-06-18T16:24:13.027Z] [INFO ] plugin-discovery-bus-thread   com.vmware.vise.plugin.extension.discovery.VcPackagesDiscoverer   Found a server in extension.server that contains a certificate and whose URL matches the one specified in extension.client: https://broadcom.vlsr.net/drplugin/plugin.json.zip. The certificate from the matching server will be used for SSL peer authentication when downloading the plugin package.

[2025-06-18T16:24:13.105Z] [INFO ] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.status.RemotePluginStatusServiceImpl       DOWNLOADING: Downloading plugin package com.vmware.drui.plugin:9.0.0.23463978 from https://broadcom.vlsr.net:443/drplugin/plugin.json.zip ...
[2025-06-18T16:24:13.105Z] [INFO ] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.download.PluginDownloadServiceImpl         Found invalid cached plugin package: 'com.vmware.drui.plugin:9.0.0.23463978'. Will retry the download.
[2025-06-18T16:24:13.105Z] [INFO ] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.download.PluginDownloadServiceImpl         Downloading plug-in package 'com.vmware.drui.plugin:9.0.0.23463978' with temporary name '/etc/vmware/vsphere-ui/vc-packages/vsphere-client-serenity/com.vmware.drui.plugin-9.0.0.23463978/plugin-package.tmp'.
[2025-06-18T16:24:13.105Z] [INFO ] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.download.PluginDownloadServiceImpl         Downloading plugin package from https://broadcom.vlsr.net/drplugin/plugin.json.zip
[2025-06-18T16:24:13.115Z] [ERROR] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.download.PluginDownloadServiceImpl         Downloading plug-in package 'com.vmware.drui.plugin:9.0.0.23463978' to '/etc/vmware/vsphere-ui/vc-packages/vsphere-client-serenity/com.vmware.drui.plugin-9.0.0.23463978/plugin-package.tmp' has failed due to unknown reasons. Removing failed plugin package folder '/etc/vmware/vsphere-ui/vc-packages/vsphere-client-serenity/com.vmware.drui.plugin-9.0.0.23463978'. javax.net.ssl.SSLPeerUnverifiedException: Certificate for <broadcom.vlsr.net> doesn't match any of the subject alternative names: [broadcom]
        at org.apache.http.conn.ssl.SSLConnectionSocketFactory.verifyHostname(SSLConnectionSocketFactory.java:507)
        at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:437)
        at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:384)
        at com.vmware.vise.plugin.http.impl.RequestAwareSslSocketFactory.connectSocket(RequestAwareSslSocketFactory.java:52)
        at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:142)
        at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:376)
        at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:393)
        at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
        at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:186)
        at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:89)
        at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
        at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:185)
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:72)
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:221)
        at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:165)
        at com.vmware.vise.plugin.download.PluginDownloadServiceImpl.downloadPackageInfo(PluginDownloadServiceImpl.java:305)
        at com.vmware.vise.plugin.download.PluginDownloadServiceImpl.download(PluginDownloadServiceImpl.java:165)
        at com.vmware.vise.plugin.async.task.PluginDownloadTask.run(PluginDownloadTask.java:51)
        at java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1640)
        at com.vmware.vise.util.concurrent.QueuingCachedThreadPool$2.call(QueuingCachedThreadPool.java:873)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at com.vmware.vise.util.concurrent.QueuingCachedThreadPool$QueueProcessor.run(QueuingCachedThreadPool.java:1271)
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
        at com.vmware.vise.util.concurrent.WorkerThreadFactory$1.run(WorkerThreadFactory.java:64)
        at java.lang.Thread.run(Thread.java:750)

[2025-06-18T16:24:13.128Z] [ERROR] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.status.RemotePluginStatusServiceImpl       DOWNLOAD_FAILED: Error downloading plugin package com.vmware.drui.plugin:9.0.0.23463978 from https://broadcom.vlsr.net:443/drplugin/plugin.json.zip. Reason: Download error. Make sure that the URL is reachable and the thumbprint is correct.
[2025-06-18T16:24:13.128Z] [ERROR] sdk-plugin-deployer-1755906   com.vmware.vise.plugin.extension.VcExtensionManager               Downloading plugin package: 'com.vmware.drui.plugin:9.0.0.23463978' registered in vCenter: 'BroadcomVC01.vlsr.net (61387A73-####-457F-####-0936144F9A4E)' has failed. java.util.concurrent.CompletionException: com.vmware.vise.plugin.download.PluginDownloadException: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <broadcom.vlsr.net> doesn't match any of the subject alternative names: [broadcom]

Resolution

1. Check the hostname of the appliance and update it to reflect FQDN, if required. 

2. Change the certificate of the appliance to reflect FQDN 

3. Reconfigure the appliance 

4. Reconnect site pair 

Alright, the plugin should be deployed in vCenter by now ! You can either refresh your browser or try logging out and back in after a few minutes. This will give vCenter some time to download the plugin. 

Powered by Wolken Software