vSphere Replication and Site Recovery Manager gets disconnected from vCenter server post VC certificate change.

Products

• VMware Live Recovery

Issue/Introduction

• Below error is noticed in the vCenter Server UI for the SRM/VR plugin

com.vmware.vim.vmomi.core.exception.CertificateValidationException. Server certificate chain is not trusted and thumbprint verification is not configured.

• The below error will be seen in the Site Recovery UI:

• In the Site Recovery UI, the following error is displayed when attempting to establish a site pair:

"Unable to retrieve pairs from extension server at https://hostname:8043. Unable to login to 'HBR Management Server at https://hostname:8043'"

• For VMware Live Recovery Appliance 9.0.3 and above below error is reflected in vCenter UI

Environment

• VMware Live Site Recovery 9.x
• VMware Site Recovery Manager 8.x
• vSphere Replication 8.x
• vSphere Replication 9.x

Cause

• The issue occurs if the Machine SSL certificate is changed on vCenter server
• This causes the communication between the two appliances to fail during the SSL handshake

Resolution

Follow these steps to reconfigure vSphere Replication and Site Recovery Manager and reconnect the sites.

1. Reconfigure vSphere Replication
   
   • Reconfigure General vSphere Replication Settings
2. Reconfigure the Site Recovery Manager
   
   • Reconfigure the VMware Live Site Recovery Appliance
     
     
3. Reconnect a site pair
   
   • Reconnect a Site Pair and Breaking a Site Pair

If machine SSL certificate on vCenter is changed post re-configuration of vSphere Replication and Site Recovery Manager sites must be re-connected.

If the issue persists, open the vSphere Replication appliance page in an incognito tab or try clearing the browser cache and then checking the VR configuration.

In case this does not help, please contact Broadcom Support for further investigation and assistance.

Additional Information

• vCenter Server の証明書変更後、vSphere Replication および Site Recovery Manager が vCenter Serverから切断される