CA署名証明書を使用してAIQUMにONTAPクラスタをCLAGで追加すると、証明書チェーンエラーで失敗する
環境
- ActiveIQ Unified Manager (AIQUM) 9.14以降
- 任意のOSタイプ
- Cloud Agent(CLAG)が有効
- ONTAP 9.14.1Px以降
- ONTAP CA署名証明書
問題
- AIQUM 9.16でCLAGを使用したクラスタ追加に失敗する
- ONTAPクラスタにはCA署名証明書がある
- WebUIレポート
Unable to add cluster datasource. This can occur if the clocks on the systems are not synchronized and the Active IQ Unified Manager HTTPS certificate start date is later than the date on the cluster, or if the cluster has reached the maximum number of EMS notification destinations. ONTAP EMS event:
mhost.ca.connect.failure: Cluster agent connection of the client: UnifiedManager_<aiqum cert-serial-num> is not healthy. Attempting to reconnect. Error: Certificate error: self-signed certificate in certificate chain.
mhost.ca.connect.failure: Cluster agent connection of the client: UnifiedManager_<aiqum cert serial num> is not healthy. Attempting to reconnect. Error: Certificate error: unable to get issuer certificateserver_acq.log:
Failed to establish connection for cloud agent instance "UnifiedManager_XXXXXX_XXXXXX_XXXXXXX_XXXXXXX". Reason:certificate error: self-signed certificate in certificate chain