CONTAP-278727: DR Config Replication Failed with Reason: Certificate with CA serial-number and common-name does not exist
Issue
- The following error events are reported in a MetroCluster system:
[Node-01: crs: callhome.dr.apply.failed:error]: Call home for DR CONFIG REPLICATION FAILED
- The METROCLUSTER-VSERVER.XML section of the autosupport shows that an SVM is degraded with the below reason:
Failed Replication Reason: Apply failed for Object: web_crypto Method: baseline. Reason: Certificate with CA: "SVM1", serial-number: "123456ABCD64670" and common-name: "SVM1" does not exist.
- The error may not manifest as a DR CONFIG REPLICATION FAILED error, but instead it can be observed that one or more sync-source & corresponding sync-destination SVMs have mismatching SSL-enabled states:
cluster_A::*> security ssl show -vserver SVM-A -fields server-enabled
vserver server-enabled
------- --------------
SVM-A true
cluster_B::*> security ssl show -vserver SVM-A-mc -fields server-enabled
vserver server-enabled
------- --------------
SVM-A-mc false