Unable to add the master server to the vCenter plugin, Error - Failed to communicate with NetBackup master server NBMASTER1 on port 8443

Article: 100046054
Last Published: 2019-07-31
Ratings: 6 0
Product(s): NetBackup

Problem

Failed to communicate with NetBackup master server Nbmaster1 on port 8443 with the supplied authentication token. Please verify that NetBackup master server name, port and authentication token are valid.

Error Message

Error - Failed to communicate with NetBackup master server Nbmaster1 on port 8443

Cause

If the TCP/IP address or host name of the vCenter does not exactly match the information in the authentication token, the following operations fail.

The Master server cannot resolve the vCenter IP.

If using the NetBackup plugins for VMware or Hyper-V: The master server must have TCP port 8443 open inbound from the hosts running the plugin (vCenter, vSphere web client, etc).

Troubleshooting

To correctly determine the problem and the corrective action review the VxUL log file. To do so issue the following command on the master servers:

install_path\netbackup\bin\vxlogcfg -a -p NB -o nbwebservice -s DebugLevel=6

With the above logging in place try to register the Master server by adding the token copied from the Master server.

To review the logs run the below command.

install_path\netbackup\bin\vxlogview -i nbwebservice -p nb -L -E

Example log output:

7/30/2019 18:01:49.996 [Error] No aliases defined for vcenter.test.local
7/30/2019 18:01:49.996 [Error] Remote host name does not match the name in the certificate, remote name:192.168.10.10, name from certificate:vcenter.test.local
7/30/2019 18:01:49.996 [Error] Invalid service-auth-token.
7/30/2019 18:07:20.623 [Error] The remote host 192.168.10.10 is trying to connect with a certificate created for vcenter.test.local
7/30/2019 18:07:20.623 [Error] The remote host must resolve to vcenter.test.local or an alias must be created for the certificate using the manageClientCerts command
7/30/2019 18:07:20.623 [Error] No aliases defined for vcenter.test.local
7/30/2019 18:07:20.623 [Error] Remote host name does not match the name in the certificate, remote name:192.168.10.10, name from certificate:vcenter.test.local

As we can see from the above error the Master server cannot resolve the client name run the below command.

To list all available tokens:

install_path\NetBackup\wmc\bin\install\manageClientCerts.bat -list

The name listed here should matched the name in vCenter.

  • If vCenter was created using FQDN the token should also be generated using FQDN only.
  • If the Master Server/vCenter is Linux make sure the names are case sensitive.

Solution

To fix the issue on the Master Server, per troubleshooting steps above, run the following command:

Example command:

install_path\NetBackup\wmc\bin\install\manageClientCerts -addAlias vcenter.test.local -IP 192.168.10.10

Now retry adding the token and it should work. 

Was this content helpful?