Azure Site Recovery Appliance: Failed to get SSL Server cert and fingerprint

Brock Harris 0

We are using Azure Modernized Site Recovery. Our replicated servers are showing no mobility service heartbeat in the Azure portal. When checking logs from a replicated server, we see the following error:

-5412 11876 341 Failed to get SSL Server cert and fingerprint for RCM Proxy 10.x.x.x:443

Thanks!

Pranay Reddy Madireddy 90 Reputation points Microsoft Vendor

2024-10-01T01:06:06.36+00:00

Hii Brock Harris

Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Check that the replicated server can connect to the Azure Site Recovery service. Use "telnet" or "Test-NetConnection" in PowerShell to test the connection to the RCM Proxy IP (10.x.x.x) on port 443.

The error indicates there is a problem with the SSL certificate. Make sure the server's SSL certificate is valid and properly installed. Check that the server running the Mobility Service trusts the SSL certificate.

Make sure the latest version of the Mobility Service is installed on the replicated server. Updating can help fix connection problems.
Check your firewall to ensure it allows traffic to Azure services on port 443. If you use a proxy, verify that the settings for the Mobility Service are correct. Sometimes, simply restarting the Mobility Service can solve transient problems. Try restarting the provider on the replicated server.
Check the special logs on the replicated server for any other error messages that would offer additional context or clues about the SSL problems.

For reference, please review this documentation:-

https://learn.microsoft.com/en-us/azure/site-recovery/upgrade-mobility-service-modernized

https://learn.microsoft.com/en-us/azure/site-recovery/vmware-azure-troubleshoot-push-install

https://learn.microsoft.com/en-us/azure/app-service/network-secure-outbound-traffic-azure-firewall

If you have any further queries, do let us know.

If the answer is helpful, please click "Accept Answer" and "Upvote it".
Pranay Reddy Madireddy 90 Reputation points Microsoft Vendor

2024-10-02T01:57:41.27+00:00

Hii Brock Harris
If you had a chance to see my comment to your question. If it was helpful, please click "Upvote" on my post let us know Thank you...!
Brock Harris 0 Reputation points

2024-10-02T23:09:53.46+00:00

Thanks for the information! Telnet and tnc both fail on port 443 to the Appliance. The agents are all up to date, and there is nothing in the firewall that would be blocking it.

We attempted to deploy a new Appliance, but registration to the same recovery services vault as the replicated servers fails with error: "Registration of 'Proxy Server' with Azure Site Recovery services failed with error 'AADSTS500011'". However, we are able to register the Appliance with a newly created recovery vault just fine.
Pranay Reddy Madireddy 90 Reputation points Microsoft Vendor

2024-10-03T17:37:31.1366667+00:00

Brock Harris - Its great to hear that you were able to register the Appliance with a newly created recovery vault.

As I understand, for now the issue is resolved.

Not sure, what could be the issue with registering the appliance with the old vault. IMO, this needs to be investigated further. If you want to know the root cause of it, then I would suggest contacting Azure technical support for assistance.

Share via

Azure Site Recovery Appliance: Failed to get SSL Server cert and fingerprint

Your answer