Test Connection for Secondary Storage on Azure Blob Storage Partition fails with the error "Migration Configuration Test has failed. Reason The parameter is incorrect"
Problem
Secondary Storage on Azure Blob Storage Partition fails to get through a connectivity test.
Error Message
DTRACE for StorageManagement with "Everything" level turned on for the OST streamer & enabling "Log Curl Messages" shows the following error.
[8748] (StorageManagement) <6600> EV:M OST Streamer: [TID:16120] [Plugin] AzureJob == Info: Connected to evserver1.ev.local (192.168.2.1) port 443 (#0)|
[8748] (StorageManagement) <6600> EV:M OST Streamer: [TID:16120] [Plugin] AzureJob == Info: ALPN, offering http/1.1|
[8748] (StorageManagement) <6600> EV:M OST Streamer: [TID:16120] [Plugin] AzureJob == Info: Cipher selection:
[8748] (StorageManagement) <6600> EV:M OST Streamer: [TID:16120] [Plugin] AzureJob == Info: CAfile: D:\Program Files (x86)\Enterprise Vault\OST\x64\\cacert.pem|
[8748] (StorageManagement) <6600> EV:M OST Streamer: [TID:16120] [Plugin] AzureJob == Info: SSL certificate problem: unable to get local issuer certificate.
NOTE: Refer to the screen shot below, to enable Advanced Logging for the Azure blob storage.
Cause
If the root certificate (or any intermediate cert) isn't trusted, or if the public key value has been changed.
Solution
1.Click the Secure button (a padlock) in an address bar.
2. Click the Certificate (Valid) & go to the Details tab.
4.Select the root certificate & click on Export.
5.Specify a path to save the .cert file
6. Open the .cert file & go to the details tab.
7.Select the issuer & click on "Copy to file."
8. Click on Next & click on “Base-64 encoded X.509 (.CER)” format.
9.Specify the name of the file you want to save the SSL certificate to
10.Click the Next and the Finish buttons
11.Navigate to the path %Program Files (x86)%\Enterprise Vault\OST\x64
12. Take a backup of the cacert.pem file to another location.
13. Open the cacert.pem file in Notepad & towards the end of the file, paste the contents of the .cert file we exported in step no 9.