VMware Live Recovery - Unable to reconnect Site Pair

Products

• VMware Live Recovery

Issue/Introduction

Upron trying to reconnect a Site Pair the end user is receiving a message: Unable to connect to Site Recovery Manager at https:<ip-address>: Reason: javax.net.ssl.SSLException: Certificate Thumbprint Mismatch.

 

 

Environment

VMware Site Recovery Manager

Cause

This error typically occurs when the SSL certificate of either your vCenter Server or Site Recovery Manager (SRM) Server has been renewed, replaced, or reinstalled. Because SRM caches the SSL certificate thumbprints during initial pair/registration, a change in certificates breaks the trust relationship.

Resolution

To correct this mismatch, use the Lookup Service Doctor (lsdoctor) utility: https://knowledge.broadcom.com/external/article/320837/using-the-lsdoctor-tool.html 

⚠️ IMPORTANT: Always test queries or command updates first in a non-production environment. Take a backup before implementing in production. Before using lsdoctor, you must shut down all vCenter Servers or PSCs in the SSO domain, take offline snapshots of all nodes at the same time, and power them back on [Using the 'lsdoctor' Tool].

1. Download and Install: Download the ZIP from the KB article and upload it to the vCenter appliance (e.g., /tmp or /root).
2. Extract: Navigate to the directory and run unzip lsdoctor.zip.
3. Run Health Check: Verify the issues without making changes: python lsdoctor.py -l
Apply Fix: Run the trust fix command and enter the [email protected] password when prompted: python lsdoctor.py -t
Restart Services: Restart all services on the node for changes to take effect: service-control --stop --all && service-control --start --all