Ask The Experts

Vserver Management Error: Failed to add the Cserver record in RDB . The certificate has expired.

adminqskills
23,857 Views

hi all,

we are getting this error:

Vserver Management Error: Failed to add the Cserver record in RDB . The certificate has expired.

creating cluster setup fro scratch. Has anybody an idea how to fix this?

thanks in advance 

1 ACCEPTED SOLUTION

adminqskills
15,102 Views

From netapp support:

 

For fresh cluster installations - 9.2, 9.3, 9.4, 9.5, 9.6
1. Set the date prior to July 6, 2019.
2. Run the cluster create steps.
3. Reset the date back to current date.

 

The news about release with fix you can follow up on BOG ONLINE via WATCH THIS Bug at the end of the page:

 

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=1250500

View solution in original post

19 REPLIES 19

vanhees
23,520 Views

I have the same issue both with 9.3/9.5. Freshly downloaded. 

adminqskills
23,504 Views

seems to be a bigger problem which more people ran in.

As far as we see, simulators also are affected

adminqskills
23,467 Views

workaround: set time of the filer in the past, do the cluster setup . After that you can  set back to correct time.  
That worked for us. Netapp is looking for a solution. I think this will be fixed by a new ontap release

JGRUBERFS
23,415 Views

Just ran into this issue while setting up four systems.

SeanHatfield
23,370 Views

Set a watch on this burt:

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=1250500

 

 

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

Zulhadi
23,069 Views

I also received same error when try create a cluster on netaontap simulator 9.2P4. Anyone have solution for this issue/bugs?

adminqskills
23,060 Views

same workaround as on physical systems.

set the time of the vsim for example to one month in the past. Do the cluster setup and then switch back to 

correct time.

Zulhadi
23,054 Views

where can i get step to do this workaround. I'm quite new to netapp and now just apply the simulator for get familiar with the ontap. Please advise sir

vanhees
23,052 Views

Hi, when you start the VM, enter the BIOS first by pressing ESC or Enter in Vmware. Then change the date / time to before 6 july 2019. After that re-start the VM and do the installation as described in the SIMULATOR documentation. 

adminqskills
15,103 Views

From netapp support:

 

For fresh cluster installations - 9.2, 9.3, 9.4, 9.5, 9.6
1. Set the date prior to July 6, 2019.
2. Run the cluster create steps.
3. Reset the date back to current date.

 

The news about release with fix you can follow up on BOG ONLINE via WATCH THIS Bug at the end of the page:

 

https://mysupport.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=1250500

davidrnexon
14,725 Views

This is why the issue is happening, when the cluster gets created it is assigned a certificate with expiry of Sat Jul 6, 2019

 

You can see this on the simulator

 

CLUSTER96::> certificate show -expiration *2019*
(security certificate show)
Vserver Serial Number Certificate Name Type
---------- --------------- -------------------------------------- ------------
CLUSTER96 85BD4BF3D8DAE369F694D75FC3A54423
Class2PrimaryCA server-ca
Certificate Authority: Class 2 Primary CA
Expiration Date: Sat Jul 06 23:59:59 2019

CLUSTER96 26 DeutscheTelekomRootCA2 server-ca
Certificate Authority: Deutsche Telekom Root CA 2
Expiration Date: Tue Jul 09 23:59:00 2019

CLUSTER96 44BE0C8B500024B411D3362AFE650AFD
UTN-USERFirst-Hardware server-ca
Certificate Authority: UTN-USERFirst-Hardware
Expiration Date: Tue Jul 09 18:19:22 2019

NetAppUser20
14,671 Views

You will also find you don't have a management web server and can't create one:

<host>::system services web> ?
  modify                      Modify the cluster-level configuration of web
                              protocols
  node>                       Manage the nodes' web servers
  show                        Display the cluster-level configuration of web
                              protocols

<host>::system services web> show
This table is currently empty.

That should never happen.

VWIPL
8,956 Views

It's not working

jdonthn
14,505 Views

hi can you provide complete steps on how you fixed this issue? how did you set the date back. if you specific command can you please share?

JGRUBERFS
14,476 Views

On a new cluster setup you proceed like normal. It will error out on the cluster setup for the first node because of the certificate issue.

 

Then it will exit to a login, login with admin and the password you just created.

 

First I set the date to June first (just needs to be prior to 7/6/2019)

cluster1::> date 201906011200

cluster1::> cluster create -clustername cluster1

cluster1::> cluster setup

 

Then continue with the normal cluster setup on node 1 and node 2.

ninjago
14,460 Views

Is there a fix for ONTAP Select when the cluster is being created through the Deploy image? This is the same error when building OTS clusters.

SeanHatfield
10,949 Views

There is, but its a bit more involved.  It's documented on the internal notes for that burt.  Alternatively, set the hosts clock back in time prior to deploying Select.  The VM clock will inherit the host clock when it boots.

 

 

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

SeanHatfield
10,628 Views

The ONTAP Select 9.6 GA version is available for download now, which includes the fix for this issue.

If this post resolved your issue, help others by selecting ACCEPT AS SOLUTION or adding a KUDO.

davidrnexon
10,682 Views

I've upgraded my simulator to 9.6GA and it looks like the issue has been resolved. I was able to re-initialize the cluster, run through the setup wizard, and it completed successfully.

 

There are now no expirying certificates for 2019

 

CLUSTER96::> security certificate show -expiration *2019*
There are no entries matching your query.

Public