Loading...
Loading...
The PowerProtect VM Direct Engine solution is used to protect the vSphere environment. The vCenter vSphere Web Client virtual machine (VM) summary tab shows an error under the PowerProtect details plug-in. org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://my-vcenter.mydomain.com/api/ui/vcenter/session/clone-ticket": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target The vmware-plugin*log shows: YYYY-MM-DD HH:MM:SS ERROR [] [https-jsse-nio-0.0.0.0-8459-exec-10] [][][][][] [c.e.b.v.p.g.SessionService.getPluginVimPort(162)] - Exception com.google.common.util.concurrent.UncheckedExecutionException: org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://my-vcenter.mydomain.com/api/ui/vcenter/session/clone-ticket": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2055) ... at java.base/java.lang.Thread.run(Thread.java:829) Caused by: org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://my-vcenter.mydomain.com/api/ui/vcenter/session/clone-ticket": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:785) ... at com.google.common.cache.LocalCache$Segment.get(LocalCache.java:2049) ... 78 common frames omitted Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131) ... at org.springframework.web.client.RestTemplate.doExecute(RestTemplate.java:776) ... 86 common frames omitted Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439) ... at java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638) ... 113 common frames omitted Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) ... at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434) ... 121 common frames omitted YYYY-MM-DD HH:MM:SS ERROR [] [https-jsse-nio-0.0.0.0-8459-exec-10] [][][][][] [c.e.b.v.p.f.AuthenticationFilter.doFilter(73)] - Authentication Failed. org.springframework.security.authentication.AuthenticationServiceException: org.springframework.web.client.ResourceAccessException: I/O error on POST request for "https://my-vcenter.mydomain.com/api/ui/vcenter/session/clone-ticket": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at com.emc.brs.vmware.plugin.gateway.SessionService.getPluginVimPort(SessionService.java:163) ...
The vSphere environment contains multiple vCenter servers in vCenter Enhanced Linked Mode. The vCenter Linked servers are managed by different PowerProtect appliances and have the vSphere plug-in option selected. The exception is generated when authenticating to a vCenter that is not managed PowerProtect Appliance vSphere plug. This issue is not affecting the backup and restore functionality but does not allow vSphere users to run the PowerProtect plug-in features when authenticating to the other vCenters.
To work around the symptom, import all the vCenter Enhanced Linked Mode server certificates to the PowerProtect appliances. The vCenter Server may be added as vCenter Asset Sources in the PowerProtect Interface, which automatically imports the certificate. To add the certificates without adding the vCenter Asset Source, contact Dell Support to use the goppdm command-line utility.
Click on a version to see all relevant bugs
Dell Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.