AIQUM client certificate deletion failed in ONTAP with serial number is in use by cloud agent
Applies to
- ActiveIQ Unified Manager (AIQUM) 9.x
- AIQUM Client Certificate
- ONTAP 9.x
Issue
- Cluster re-addition to AIQUM after its removed once is failing
- Error in AIQUM GUI:
Unable to add cluster datasource. This can occur if the clocks on the systems are not synchronized and the Active IQUnified Manager HTTPS certificate start date is later than the date on the cluster, or if the cluster has reached the
maximum number of EMS notification destinations.
- AIQUM server_acq log:
Caused by: java.lang.RuntimeException: java.lang.RuntimeException: duplicate entry - Verified from database that cluster is not present anywhere in AIQUM
- Checking from ONTAP side, AIQUM related certificates are found in ONTAP as type server-ca, client-ca and client
- AIQUM client certificate deletion failed in ONTAP server-ca and client-ca certs can be removed,
- Failure reason shows:
Error: Cannot remove the certificate <certificate_serial_no> because a cloud agent instance is using it.
