Azure Site Recovery Appliance: Failed to get SSL Server cert and fingerprint

Brock Harris 0

We are using Azure Modernized Site Recovery. Our replicated servers are showing no mobility service heartbeat in the Azure portal. When checking logs from a replicated server, we see the following error:

-5412 11876 341 Failed to get SSL Server cert and fingerprint for RCM Proxy 10.x.x.x:443

Thanks!

Pranay Reddy Madireddy 110 Reputation points Microsoft Vendor

2024-10-01T01:06:06.36+00:00

Hii Brock Harris

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Check that the replicated server can connect to the Azure Site Recovery service. Use "telnet" or "Test-NetConnection" in PowerShell to test the connection to the RCM Proxy IP (10.x.x.x) on port 443.

The error indicates there is a problem with the SSL certificate. Make sure the server's SSL certificate is valid and properly installed. Check that the server running the Mobility Service trusts the SSL certificate.

Make sure the latest version of the Mobility Service is installed on the replicated server. Updating can help fix connection problems.
Check your firewall to ensure it allows traffic to Azure services on port 443. If you use a proxy, verify that the settings for the Mobility Service are correct. Sometimes, simply restarting the Mobility Service can solve transient problems. Try restarting the provider on the replicated server.
Check the special logs on the replicated server for any other error messages that would offer additional context or clues about the SSL problems.

For reference, please review this documentation:-

https://zcusa.951200.xyz/en-us/azure/site-recovery/upgrade-mobility-service-modernized

https://zcusa.951200.xyz/en-us/azure/site-recovery/vmware-azure-troubleshoot-push-install

https://zcusa.951200.xyz/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it".
Pranay Reddy Madireddy 110 Reputation points Microsoft Vendor

2024-10-02T01:57:41.27+00:00

Hii Brock Harris
If you had a chance to see my comment to your question. If it was helpful, please click "Upvote" on my post let us know Thank you...!
Brock Harris 0 Reputation points

2024-10-02T23:09:53.46+00:00

Thanks for the information! Telnet and tnc both fail on port 443 to the Appliance. The agents are all up to date, and there is nothing in the firewall that would be blocking it.

We attempted to deploy a new Appliance, but registration to the same recovery services vault as the replicated servers fails with error: "Registration of 'Proxy Server' with Azure Site Recovery services failed with error 'AADSTS500011'". However, we are able to register the Appliance with a newly created recovery vault just fine.
Pranay Reddy Madireddy 110 Reputation points Microsoft Vendor

2024-10-03T17:37:31.1366667+00:00

Brock Harris - Its great to hear that you were able to register the Appliance with a newly created recovery vault.

As I understand, for now the issue is resolved.

Not sure, what could be the issue with registering the appliance with the old vault. IMO, this needs to be investigated further. If you want to know the root cause of it, then I would suggest contacting Azure technical support for assistance.

1 answer

Pranay Reddy Madireddy 110 Reputation points Microsoft Vendor

2024-10-08T16:43:41.7433333+00:00

Brock Harris- I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: Azure Site Recovery Appliance: Failed to get SSL Server cert and fingerprint

Solution: We attempted to deploy a new Appliance, but registration to the same recovery services vault as the replicated servers fails with error: "Registration of 'Proxy Server' with Azure Site Recovery services failed with error 'AADSTS500011'".
Please go through the attached link for better understanding :- https://zcusa.951200.xyz/en-us/azure/site-recovery/deploy-vmware-azure-replication-appliance-modernized

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure Site Recovery Appliance: Failed to get SSL Server cert and fingerprint

1 answer

Your answer