Symptoms

HTML 5 Plugin shows no data in DashboardIn the Plugin Server submenu one cluster will show a warning with the reason of "Certificate Invalid". And another cluster will show an error with the reason of "Not reachable"In the Plugin Server message file, we see the following error lines repeating continuously: May 11 10:02:23 linux-b2we run.sh[638]: rp_inventory [INFO] (rp_cluster_certificate_manager.py:99) - Adding certificate with uuid: rp_cert-400cd8917d1eebea failed: (400) May 11 10:02:23 linux-b2we run.sh[638]: Reason: BAD REQUEST May 11 10:02:23 linux-b2we run.sh[638]: HTTP response headers: HTTPHeaderDict({'Date': 'Tue, 11 May 2021 02:02:23 GMT', 'Content-Type': 'application/json', 'Content-Length': '90', 'Connection': 'keep-alive'}) May 11 10:02:23 linux-b2we run.sh[638]: HTTP response body: { May 11 10:02:23 linux-b2we run.sh[638]: "error": { May 11 10:02:23 linux-b2we run.sh[638]: "code": "9940024", May 11 10:02:23 linux-b2we run.sh[638]: "message": "'Certificate already exists'"

Cause

The Plugin Server logic is when it finds a cluster it downloads its certificate and check that no other similar certificates exist before starting to use it. When the two RP Clusters are joined they use the same web certificate, so the certificate for one of the sites will be found as Duplicate and this causes the check to stop and not populate data.

Resolution

Workaround:Do the following steps on the Plugin Server: Log in to vRPA Plugin Server from the VSphere Web Console. Disable the firewall by the following command: /sbin/SuSEfirewall2 off Goto /etc/pki/trust/anchors and find RPC_rp_cert-RPCLusterinternalUID (that name can be found in error messages of plug-in highlighted in bold above) Log in to root on the Plugin server using ssh and run the following command: scp root@RP.Site.Control.IP:/etc/kbox/ssl/rpa_web_server.crt /etc/pki/trust/anchors/RPC_rp_cert-"RPclusterinternalID" The Plugin Server root password, which was changed by this time, is required to copy the vRPA certificate from the vRPA to the Plugin Server. Update the certificate management service on the Plugin Server by running the following command from within the vSphere Console: update-ca-certificates Power off the Plugin Server, power it back on, giving it roughly 2 minutes to orient itself. If done too early, internal errors and other communication issues appear in the HTML5 plug-in. If the issue is not cleared after 30 minutes, then log in to each RPA SC IP using ssh as root and run the following command: kill_tomcat Resolution:Dell engineering is investigating this issue. A permanent fix is still in progress. Contact the Dell Customer Support Center or your service representative for assistance and reference this solution ID.

Support Cases