Symptoms

One node is reporting the high availability (HA) agent running successfully, other nodes report errors. fdm.log: 2021-04-06T17:05:48.712Z error fdm[3760937] [Originator@6876 sub=Message opID=SWI-66cb188e] [MsgConnectionImpl::FinishSSLConnect] Error N7Vmacore3Ssl18SSLVerifyExceptionE(SSL Exception: Verification parameters: --> PeerThumbprint: D1:33:DB:E9:81:AA:32:xx:xx:xx:xx:xx --> ExpectedThumbprint: F9:25:8E:9A:9D:2F:B3:C8:xx:xx:xx:xx:xx:xx --> ExpectedPeerName: host-xxxxx --> The remote host certificate has these problems: --> --> * Host name does not match the subject name(s) in certificate.) --> [context]zKq7AVECAAAAALd+BQEMZmRtAADsvodmZG0AAMCieQBJcHcA9L17ANmEjgDPho4AZRt9ADWufADTs3wAayCIATt9AGxpYnB0aHJlYWQuc28uMAACfZ8ObGliYy5zby42AA==[/context] on handshake

Cause

Node certificate issues

Resolution

To resolve this issue: Disable HA on the cluster - it allows migrating virtual machines between hosts once disabledOffload VMs from the problematic node (the only node which has a running HA Agent)Place the node into Maintenance ModeDisconnect the host from the clusterReconnect the host to the clusterEnable HA on the cluster - HA status on all nodes should be green

Support Cases