Symptoms
The NWUI console shows:
Failed to fetch latest counts for Dashboard
Error is fetching count of activities based on status from Monitoring Service
The C:\Program Files\EMC NetWorker\nsr\authc-server\tomcat\logs\nwui.log shows:
HH:MM:SS [https-jsse-nio-9090-exec-2] ERROR c.e.n.c.n.i.MonitoringApi - Error in fetching count of activities based on status from Monitoring Service. javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed
Cause
The NWUI monitoring keystore certificate is not available in the NetWorker Runtime Environment (NRE) keystore. The NWUI monitoring needs permissions in the NRE keystore to authenticate to the NetWorker datazone. The cause of the missing NWUI monitoring process keystore certificate is not known currently.
The NRE keystore should show the emcnwuimonitoring certificate details:
C:\Program Files\NRE\java\jre1.8.0_321\bin>keytool.exe -list -keystore ..\lib\security\cacerts | findstr emcnwuimonitoring
Enter keystore password: changeit
emcnwuimonitoring, Apr 27, 2022, trustedCertEntry,
C:\Program Files\NRE\java\jre1.8.0_321\bin>
Resolution
The NWUI monitoring keystore certificate must be imported to the NRE keystore. 1. Open a command prompt window with the "Run as administrator" option.2. Change to the NRE bin directory. The NRE path varies depending on the installed NRE version and server Operating System:
Linux:
cd /opt/nre/java/latest/bin/
Windows:
cd "C:\Program Files\NRE\java\jre1.8.0_321\bin>"
3. List the NRE keystore contents to validate the emcnwuimonitoring does not exist. Default password is "changeit".
Linux:
./keytool -list -keystore ../lib/security/cacerts | grep emcnwuimonitoring
Windows:
keytool.exe -list -keystore ..\lib\security\cacerts | findstr emcnwuimonitoring
4. Import the NWUI monitoring keystore to the NRE keystore:
Linux:
./keytool -import -alias emcnwuimonitoring -file /nsr/nwui/monitoring/app/conf/emcnwuimonitoring.cer -keystore ../lib/security/cacerts
Windows:
keytool.exe -importcert -alias emcnwuimonitoring -file "C:\Program Files\EMC NetWorker\nwui\monitoring\app\conf\emcnwuimonitoring.cer" -keystore ..\lib\security\cacerts
5. Stop the "NetWorker Backup and Recover Server" service:
Linux:
nsr_shutdown
Windows:
net stop nsrd
6. Start the "NetWorker Backup and Recover Server" service:
Linux:
systemctl start networker
Windows:
net start nsrd
7. List the NRE keystore contents to validate the emcnwuimonitoring exists. Default password is "changeit".
Linux:
./keytool -list -keystore ../lib/security/cacerts | grep emcnwuimonitoring
Windows:
keytool.exe -list -keystore ..\lib\security\cacerts | findstr emcnwuimonitoring
8. Validate the symptom is no longer encountered in the NWUI.
