Question

Invalid Certificate. Check if the Client has a valid Certificate For SQL backup

  • 6 March 2024
  • 5 replies
  • 174 views

Badge +3

Hi,

We are getting a Communicatins failure between a SQL Windows server and our commserve.  The Error returned is : Invalid  Certificate. Check if the Client has a valid Certificate.

 

client  shows Not Ready Status

 

Has anyone ever seen this? If so is it a CV error or is there something the SQL ADMIN has to check on their side?


5 replies

Userlevel 6
Badge +15

@Commvault387 sounds like the certificate the Commserve tries to send the client has failed for some reason. 

“By default, client certificates are automatically renewed every 6 months for clients and every 5 years for the CommCell Certificate Authority (CA). However, you can manually renew a certificate that has been revoked.”

https://documentation.commvault.com/2023e/expert/client_certificates.html

Could you try revoking the existing certificate for the client then renewing it and seeing if this helps?

Steps are here:
https://documentation.commvault.com/2023e/expert/revoking_client_certificate_from_commcell_console.html

https://documentation.commvault.com/2023e/expert/renewing_revoked_certificate_in_typical_commcell_environment.html

Regards,

Chris

Badge +3

Hi Thanks,

 

I checked and the Certificate is active  and valid til 6/24.

 

Thanks

Userlevel 4
Badge +10

Hi @Commvault387 ,

Try renewing the certificate as advised by @Chris Hollis 

 

https://documentation.commvault.com/2023e/expert/revoking_client_certificate_from_commcell_console.html

https://documentation.commvault.com/2023e/expert/renewing_revoked_certificate_in_typical_commcell_environment.html

Badge +3

The physical server (showed revoked) I click renewed still waiting how long does it usually take to take effect?

Thanks

Userlevel 4
Badge +10

The process should be pretty quick as long as the communication between CS and Client is there.

 

You may also try the manual operation described in the following documentation link;

https://documentation.commvault.com/2023e/expert/renewing_revoked_certificate_in_locked_down_commcell_environment.html

 

If that also fails, I would suggest to raise a new case with the Client Support Focus group to run further analysis on this condition

Reply