Symptoms

- When running the uemcli command with the "-silent" option, an error is generated instead of the command being ran. # uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general show Unable to validate the specified certificate. (Error Code:0x1000100) - When run without the "-silent" option, a Certificate-related menu is displayed.Selecting "[2] Reject the certificate" here generate an error message. # uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show Remote certificate: Issuer: CN=CKM00xxxxxxxxx Subject: CN=CKM00xxxxxxxxx Valid from: 20xx:mm:dd:hh:mm:ss Valid to: 20xx:mm:dd:hh:mm:ss Serial: 00xxxxxxxxxxxxxxxxx Id: xxxxxxxxxx Would you like to: [1] Accept the certificate for this session [2] Reject the certificate [3] Accept and store Please input your selection (The default selection is [1]): 2 Operation failed. Error code: 0x1000100 Unable to validate the specified certificate. (Error Code:0x1000100)

Cause

Once the Certificate is Accept and Store when the uemcli command is ran, the information is stored in the lockbox of the Local System where the command was ran.In that case, while the certificate is valid, the next time uemcli command is ran, it will not ask for confirmation of the certificate's response.However, using the "-silent" option results in an error if a situation requires confirmation regarding the correspondence of the certificate when the uemcli command is ran.These occur in the following situations.(1) If the information corresponding to the current certificate is not stored in the lockbox of the system on which the uemcli command was ran.(2) When a Certificate on Unity is updated to a new certificate or expires.- Command to check the information stored in the lockbox of the system on which the uemcli command was ran. (If unisphere client is running on windows or linux, run it on that client, if uemcli command is running on Unity SP, check it on SP.)# uemcli -certList

Resolution

If the situation matches the above, the following actions are expected to improve the situation.[Option 1:]Manually run the uemcli command without the "-silent" option and select "[3] Accept and store" when asked about how would you like the Certificate to be.# uemcli /sys/general show.....Would you like to: [1] Accept the certificate for this session [2] Reject the certificate [3] Accept and store <<< select this......Consider:If the certificate has expired, the menu in [3] does not appear. Update the certificate by following the KB below.https://www.dell.com/support/kbdoc/en-us/000022509/dell-emc-unity-how-to-manually-renew-a-unity-management-ssl-certificate-user-corretableOnce a Certificate is accepted and store, the selection screen is not displayed for each command execution while the Certificate is valid.# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> /sys/general show1: System name = CKM00xxxxxxxxx Model = Unity 300 Product serial number = CKM00xxxxxxxxx Auto failback = on Health state = OK (5)[Option 2:]Add the "-sslPolicy accept" option to the uemcli command.This option automatically accepted the certificate when the uemcli command is ran.Before:# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent /sys/general showUnable to validate the specified certificate. (Error Code:0x1000100)After:# uemcli -no -d <xxx.xxx.xxx.xxx> -u admin -p <password> -silent -sslPolicy accept /sys/general show1: System name = CKM00xxxxxxxxx Model = Unity 300 Product serial number = CKM00xxxxxxxxx Auto failback = on Health state = OK (5) 

Support Cases