SRA Command 'discoverDevices' Fails Due to SSL Certificate Mismatch - VMware Live Recovery

Products

• VMware Live Recovery

Issue/Introduction

When attempting to configure VMware Live Recovery (VLR) or SRM, the SRA 'discoverDevices' command may fail. This issue occurs when the SSL certificate on the storage array does not include the active hostname in the Subject Alternative Name (SAN), despite the array being reachable.

Symptoms:

• • SRA command 'discoverDevices' failed.
  • Error message: "x509 certificate is valid for [Array Name], not [Hostname]. Make sure you have entered correct storage system details..."
  • VLR/SRM configuration fails during storage discovery.

Environment

• VMware Live Recovery
• Protection and Recovery
• Site Recovery Manager

Cause

The failure occurs due to an SSL/TLS certificate validation error during the SRA discovery process. The certificate installed on the storage array contains a Subject Alternative Name (SAN) that only lists the internal array name, but does not include the fully qualified domain name (FQDN) used for the connection. Because the FQDN used for the VLR connection is missing from the certificate's SAN field, the handshake is rejected for security reasons, causing the discoverDevices command to fail.

Resolution

1. Engage your storage vendor (e.g., HPE) to verify the SSL certificate configuration on the storage array.
2. Replace the certificate on the array with an updated version that explicitly includes the following in the certificate Subject Alternative Name (SAN):
   • The fully qualified domain name (FQDN) of the array.
   • The IP address of the array.
3. Validate that the certificate is properly installed and trusted by the VLR/SRM environment.
4. Retry the SRA discovery operation.