Hello, my certificate on the configuration server has expired. after registering the server again, I was able to renew the certificate. However, no data is sent to Azure. I found the following errors in the CBEngineCurr.errlog.

@Werner Ainhauser Thank you for reaching out to Microsoft Q&A. I understand that you are seeing issues with connectivity between your Azure site recovery process servers and Azure Blob storage even after you renewed the certificate. The error that you are seeing is: AADSTS700027: Client assertion contains an invalid signature. [Reason - The key was not found., Thumbprint of key used by client: ' ABCDEF1234567890ABCDEF1234567890ABCDEF12', Can you please confirm the correct certificate is in place and that it is Base64 encoded? Thank you@

Problems process server connection to Azure blob storage

Accepted answer

SaiKishor-MSFT 17,211 Reputation points

2022-03-03T18:15:37.137+00:00

@Werner Ainhauser Thank you for reaching out to Microsoft Q&A. I understand that you are seeing issues with connectivity between your Azure site recovery process servers and Azure Blob storage even after you renewed the certificate.

The error that you are seeing is: AADSTS700027: Client assertion contains an invalid signature. [Reason - The key was not found., Thumbprint of key used by client: ' ABCDEF1234567890ABCDEF1234567890ABCDEF12',

Can you please confirm the correct certificate is in place and that it is Base64 encoded? Thank you@
Please sign in to rate this answer.
Werner Ainhauser 41 Reputation points

2022-03-04T13:24:12.793+00:00

Hi,

the certificate on the server with this thumbprint is expired. I see that there is a second certificate installed with the same name what will expire 2025.
How can I switch to this new certificate?

SaiKishor-MSFT 17,211 Reputation points

2022-03-05T00:57:36.96+00:00

@Werner Ainhauser How did you renew your certificate that had expired? Since your certificate had already expired, the right way to renew certificate is as below:

Post expiry, certificates cannot be renewed from Azure portal. Before proceeding, ensure all components scale-out process servers, master target servers and mobility agents on all protected machines are on latest versions and are in connected state.

Follow this procedure only if certificates have already expired. Login to configuration server, navigate to C drive > Program Data > Site Recovery > home > svsystems > bin and execute "RenewCerts" executor tool as administrator.

A PowerShell execution window pops-up and triggers renewal of certificates. This can take up to 15 minutes. Do not close the window until completion of renewal.

Werner Ainhauser 41 Reputation points

2022-03-08T13:07:33.967+00:00

Hi,
I just tried this but it didn't help. Finally, the support team was able to solve the problem. We manually deleted the expired certificates from the local personal certificates. Then we reregistered the configuration server again on the process server.

SaiKishor-MSFT 17,211 Reputation points

2022-03-08T13:25:40.78+00:00

@Werner Ainhauser Thank you for sharing the solution. We are glad the issue was resolved.
Sign in to comment

Share via

Problems process server connection to Azure blob storage

0 additional answers