Skip to main content
NetApp Knowledge Base

SCO backups gives a warning on retention with ssl connection couldn't be established

  1. Last updated
    Jun 12, 2025
  2. Save as PDF
Views:
9
Visibility:
Public
Votes:
0
Category:
snapcenter
Specialty:
snapx
Last Updated:
6/12/2025, 5:09:15 PM

Applies to

  • SnapCenter Plug-In for Oracle (SCO)
  • SnapCenter Server for Linux

Issue

When SCO backup operations are performed the job completes with warnings on the retention step and as a result the snapshots are not being removed in storage. The following errors can be seen:
 
SnapManager.SMSDAL.Backup.ONTAPSnapshotRetention.RemoveSnapshot(RemoveSnapshotRequest request) : Detailed Exception The SSL connection could not be established, see inner exception. Chain of certificates are missing for the certificate 'server name'. Check if intermediate and root CA certificates exist.
Host 'server name' does not match with the certificate common name(CN) or SAN listed names. Check the certificate 'server name' for more information. : BaseException SnapMgrContracts.SmCertificateWebException: Chain of certificates are missing for the certificate 'server name'. Check if intermediate and root CA certificates exist.
Host 'server name' does not match with the certificate common name(CN) or SAN listed names. Check the certificate 'server name' for more information.
   at SnapMgrHelper.RestAdapter.IsSslConnectionSecure(X509Certificate2 cert, X509Chain chain, SslPolicyErrors sslPolicyErrors, String targetHostName)
   at SnapMgrHelper.RestAdapter.StrictValidateSmCertificate(HttpRequestMessage httpSender, X509Certificate cert, X509Chain chain, SslPolicyErrors sslPolicyErrors)
   at System.Net.Security.SslStream.VerifyRemoteCertificate(RemoteCertificateValidationCallback remoteCertValidationCallback, SslCertificateTrust trust, ProtocolToken& alertToken, SslPolicyErrors& sslPolicyErrors, X509ChainStatusFlags& chainStatus)
   at System.Net.Security.SslStream.CompleteHandshake(SslAuthenticationOptions sslAuthenticationOptions)
   at System.Net.Security.SslStream.ForceAuthenticationAsync[TIOAdapter](Boolean receiveFirst, Byte[] reAuthenticationData, CancellationToken cancellationToken)
   at System.Net.Http.ConnectHelper.EstablishSslConnectionAsync(SslClientAuthenticationOptions sslOptions, HttpRequestMessage request, Boolean async, Stream stream, CancellationToken cancellationToken)
Exit ONTAPSnapshotManagement - RemoveSnapshot
RemoveSnapshot - failed with error -1:The SSL connection could not be established, see inner exception.

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.