Important Update: Cohesity Products Knowledge Base Articles
All Cohesity Knowledge Base Articles are now managed via the Cohesity Support Portal: https://support.cohesity.com/s/searchunify. The Knowledge Base articles available here will not reflect the latest information or may no longer be accessible.
Problem
Unable to receive Certificate from Target Master Server when setting up trust for AIR.
Error Message
# nbcertcmd -getCACertificate -server <Target Server>
nbcertcmd: The -getCACertificate operation failed for server <Target Master>.
EXIT STATUS 5969: Response from the NetBackup Web Management Console service could not be parsed.
In the nbcert logs we could see the following:
parse_json_error_response: Error payload received from server is :<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="referrer" content="no-referrer"> <title>Web Filter Violation</title> <style type="text/css"> html, body { margin: 0; padding: 0; font-family: Verdana, Arial, sans-serif; font-size: 10pt; } h1, h2 { height: 82px; text-indent: -999em; margin: 0; padding: 0; margin: 0; } div { margin: 0; padding: 0; } div.header { background: url(http://<ServerName>:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 0 repeat-x; height: 82px; } div.header h1 { background: url(http://<ServerName>:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG) 0 0 no-repeat; } div.header h2 { background: url(http://<ServerName>:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -82px no-repeat; width: 160px; float: right; } div.sidebar { width: 195px; height: 200px; float: left; } div.main { padding: 5px; margin-left: 195px; } div.buttons { margin-top: 30px; text-align: right; } h3 { margin: 36px 0; font-size: 16pt; } .blocked h3 { color: #c00; } .authenticate h3 { color: #36c; } h2.fgd_icon { background: url(http://<ServerName>:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -166px repeat-x; width: 90px; height: 92px; margin: 48px auto; } .blocked h2.fgd_icon { background-position: 0 -166px; } .authenticate h2.fgd_icon { background-position: -89px -166px; } form { width: 300px; margin: 30px 0; } label { display: block; width: 300px; margin: 5px 0; line-height: 25px; } label input { width: 200px; border: 1px solid #7f9db9; height: 20px; float: right; } </style> </head> <body class="blocked"> <div class="header"> <h2>Powered By Fortinet</h2> <h1>FortiGuard Web Filtering</h1> </div> <div class="sidebar"> <h2 class="fgd_icon">blocked</h2> </div> <div class="main"> <h3>Web Page Blocked!</h3> <div class="notice"> <p>You have tried to access a web page which is in violation of your internet usage policy.</p> <p> URL: https://<name of server>/<br /> Category: Unrated <br/>User name: <br/>Group name: </p> <p> </p> <p> To have the rating of this web page re-evaluated <a href="http://url.fortinet.net/rate/submit.php?id=ID&cat=00&loc=https://<ServerName>/&ver=8">please click here</a>.</p> </div> </div> </body> </html>
Cause
The cause for this error could be that the response that we are getting from the Target server is not what is expected. In this scenario it was a router firewall blocking us from getting the certificate.
Solution
We loaded the HTML response that we were getting so we could see what it was. We took the output above saved it in an html file and opened it and got the following output:
The customer was able to login to his router and turn off the firewall, and then we received the Certificates with no issues.
Was this content helpful?
Translated Content
Please note that this document is a translation from English, and may have been machine-translated. It is possible that updates have been made to the original version after this document was translated and published. Veritas does not guarantee the accuracy regarding the completeness of the translation. You may also refer to the English Version of this knowledge base article for up-to-date information.