Partial functionality with Active IQ Unified Manager monitoring on a specific cluster
Applies to
- Active IQ Unified Manager (AIQUM) 9.12 and later
- ONTAP 9
Issue
- Cluster appears to gather most inventory info, but acquisition shows
Failed
in Cluster Setup in AIQUM - Performance data is not collected, resulting in a gap in the performance graphs
- ONTAP audit log gives
Message (null)
on HTTP from the AIQUM address - In the
sample.log
underroot
within an acquisition recording or theocumserver.log
. Error:
WARN [oncommand] [reconciliation-0] [c.n.d.c.ClusterStatusListener] Acquisition Failed for cluster : <ip address> message : Cannot store non-PrivateKeys
- The cluster cannot be removed, throwing no error in the UI, and if attempted using um cli, it throws:
ERROR: Cannot store non-PrivateKeys
/opt/netapp/essentials/jboss/server/onaro/cert/aiqum_mtls_<cluster_name/IP>.keystore
will not exist for the affected cluster if this is the issue being experiencedocumserver.log:
INFO [admin] [default task-1485] [c.n.o.r.c.s.i.v.ClusterConnectionService] Unable to fetch the mututal TLS certificate for alias aiqum-mtls-<NODE_MANAGEMENT_IP>
...
ERROR [oncommand] [reconciliation-2] [syd-nas2-cl.gnm.int(incremental@00:00:46.349)] [c.n.dfm.collector.OcieJmsListener] Inventory change listener error
com.netapp.autozapi.client.ApiProtocolException: Connection error to Storage System <cluster_name>: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at deployment.dfm-app.war//com.netapp.autozapi.client.ZapiInvocation.invoke(ZapiInvocation.java:146)
at deployment.dfm-app.war//com.netapp.autozapi.client.XmlZapiInvocation.invoke(XmlZapiInvocation.java:40)