Unable to login, status: 7656

При открытии на сервере консоли Security Management появляется ошибка:

Unable to login, status: 7656
The revocation status of the host certificate cannot be
verified using the Certifiacete Revocation List (CRL) because the CRL expired.

The revocation status of the host certificate cannot be

verified using the Certifiacete Revocation List (CRL) because the CRL expired.

Это происходит из-за ошибки обновлении сертификата сервера. Ошибка присутствует в Security Management -> Security Events -> Audit Event

25.07.2020 8:00:43	fd574627-b1a8-4a78-9ed2-381392fb1cdc@master-srv(192.168.1.57)	MODIFY	CERT	Certificate renew request for host ‘master-srv	‘ was rejected

1	25.07.2020 8:00:43 fd574627–b1a8–4a78–9ed2–381392fb1cdc@master–srv(192.168.1.57) MODIFY CERT Certificate renew request for host ‘master-srv ‘ was rejected

Дальше будут видны ошибки подключения хостов включая доступ к админке:

25.07.2020 18:28:55	<anonymous>@master-srv	ACCESS	CONNECTION	Host ‘192.168.1.57’ is trying to connect to host ‘master-srv’. The connection is dropped, because there was a problem with the certificate validation.	The revocation status of the peer host certificate cannot be verified using the Certificate Revocation List (CRL), because the CRL is not up-to-date. It is older than seven days.
25.07.2020 19:26:29	<anonymous>@192.168.1.21	ACCESS	CONNECTION	Host ‘192.168.1.21’ is trying to connect to host ‘master-srv’. The connection is dropped, because there was a problem with the certificate validation.	VxUL oid = 486, id = 94

25.07.2020 18:28:55 <anonymous>@master–srv ACCESS CONNECTION Host ‘192.168.1.57’ is trying to connect to host ‘master-srv’. The connection is dropped, because there was a problem with the certificate validation. The revocation status of the peer host certificate cannot be verified using the Certificate Revocation List (CRL), because the CRL is not up–to–date. It is older than seven days.

25.07.2020 19:26:29 <anonymous>@192.168.1.21 ACCESS CONNECTION Host ‘192.168.1.21’ is trying to connect to host ‘master-srv’. The connection is dropped, because there was a problem with the certificate validation. VxUL oid = 486, id = 94

Если красивая джава админка уже не доступна, то можно посмотреть в CMD

C:\Program Files\Veritas\veritas\NetBackup\bin> nbcertcmd -getCRL
Failed to fetch certificate revocation list for master-srv. 5982: The certificate revocation list is unavailable.
Successfully refreshed security level for master-srv.
EXIT STATUS 9305: CRL retrieval operation was partially successful.

C:\Program Files\Veritas\veritas\NetBackup\bin> nbcertcmd -getcertificate -force
nbcertcmd: The -getCertificate operation failed for server master-srv.
EXIT STATUS 5982: The certificate revocation list is unavailable.

C:Program FilesVeritasveritasNetBackupbin> nbcertcmd -getCRL

Failed to fetch certificate revocation list for master–srv. 5982: The certificate revocation list is unavailable.

Successfully refreshed security level for master–srv.

EXIT STATUS 9305: CRL retrieval operation was partially successful.

C:Program FilesVeritasveritasNetBackupbin> nbcertcmd -getcertificate -force

nbcertcmd: The -getCertificate operation failed for server master–srv.

EXIT STATUS 5982: The certificate revocation list is unavailable.

Чинилка

cd /d C:\Program Files\Veritas\veritas\NetBackup\bin\
	bptestnetconn -wnbwmc/security -T 5 -e 2 -H master-srv -v

	bpdown -e “NetBackup Web Management Console” -f –v
	bpup -e “NetBackup Web Management Console” -f –v

cd /d C:\Program Files\veritas\NetBackup\bin\admincmd
	nbcertconfig –u
	Enter the password of the NetBackup Web Services account:********
	NetBackup AT service configuration for web service user completed successfully.

cd /d C:\Program Files\veritas\NetBackup\bin\
	bpdown /f /v
	bpup /f /v

	nbcertcmd -getCrl
	Successfully refreshed certificate revocation list for master-srv.
	Successfully refreshed security level for master-srv.

cd /d C:Program FilesVeritasveritasNetBackupbin

bptestnetconn -wnbwmc/security -T 5 -e 2 -H master–srv -v

bpdown -e “NetBackup Web Management Console” -f –v

bpup -e “NetBackup Web Management Console” -f –v

cd /d C:Program FilesveritasNetBackupbinadmincmd

nbcertconfig –u

Enter the password of the NetBackup Web Services account:********

NetBackup AT service configuration for web service user completed successfully.

cd /d C:Program FilesveritasNetBackupbin

bpdown /f /v

bpup /f /v

nbcertcmd -getCrl

Successfully refreshed certificate revocation list for master–srv.

Successfully refreshed security level for master–srv.

Что бы восстановить подключение хостов к мастер серверу на хостах выполнить: Для Windows

cd /d C:\Program Files\veritas\NetBackup\bin\
bpdown /f /v
bpup /f /v

cd /d C:Program FilesveritasNetBackupbin

bpdown /f /v

bpup /f /v

Для Linux

[root@client spec]# cd /usr/openv/netbackup/bin/
[root@client bin]# ./nbcertcmd -getCrl 
Successfully refreshed certificate revocation list for master-srv.
Successfully refreshed security level for master-srv.
[root@client bin]# /etc/init.d/vxpbx_exchanged restart
Restarted Veritas Private Branch Exchange

[root@client spec]# cd /usr/openv/netbackup/bin/

[root@client bin]# ./nbcertcmd -getCrl

Successfully refreshed certificate revocation list for master–srv.

Successfully refreshed security level for master–srv.

[root@client bin]# /etc/init.d/vxpbx_exchanged restart

Restarted Veritas Private Branch Exchange

Используемые ссылки: https://www.veritas.com/support/en_US/article.100045673 https://www.veritas.com/support/en_US/article.100039736