vSphere Replication and Site Recovery Manager gets disconnected from vCenter server post VC certificate change.

Products

• VMware Live Recovery

Issue/Introduction

• Below error is noticed in the vCenter Server UI for the SRM/VR plugin

com.vmware.vim.vmomi.core.exception.CertificateValidationException. Server certificate chain is not trusted and thumbprint verification is not configured.

• The below error will be seen in the Site Recovery UI:

• For VMware Live Recovery Appliance 9.0.3 and above below error is reflected in vCenter UI

Environment

• VMware Live Site Recovery 9.x
• VMware Site Recovery Manager 8.x
• vSphere Replication 8.x
• vSphere Replication 9.x

Cause

• The issue occurs if the Machine SSL certificate is changed on vCenter server
• This causes the communication between the two appliances to fail during the SSL handshake

Resolution

Follow these steps to reconfigure vSphere Replication and Site Recovery Manager and reconnect the sites.

1. Reconfigure vSphere Replication
   
   • Reconfigure vSphere Replication Server Settings
     
     
2. Reconfigure the Site Recovery Manager
   
   • Reconfigure the VMware Live Site Recovery Appliance
     
     
3. Reconnect a site pair
   
   • Reconnect a Site Pair and Breaking a Site Pair

If machine SSL certificate on vCenter is changed post re-configuration of vSphere Replication and Site Recovery Manager sites must be re-connected.
If the issue persists after running the script, or if the symptoms and issue described above match your scenario but the resolution steps do not help, please contact Broadcom Support for further investigation and assistance.

Additional Information

• vCenter Server の証明書変更後、vSphere Replication および Site Recovery Manager が vCenter Serverから切断される