Problem DCO 8.1 Certificate

[DCIM_Support]

Dear All,

I'm installing an new DCO server 8.1, and I have the following error:

Error: It seems the server was installed in the future. Please verify the server time is correct and reinstall the server.

It's seems to be a certificate issue,

Any suggestion.

Best regards.

(CID:153093713)

[DCIM_Support]

I did some initial investigation.
Although the error appears, no service is stopped or halted, so DCO is unaffected by the error message.
It seems to a problem on ITA as well, so presumedly all versions of DCO and ITA.

(CID:153550865)

[DCIM_Support]

Thanks for your answer, but the problem is that no one can access to operation via Web...

Thanks for your help.

(CID:153550875)

[DCIM_Support]

Hi Ali Chams.

Can you provide further details about the missing access to operation via Web. What errors are you shown when trying to access?

(CID:153550886)

[DCIM_Support]

Hi,

Via web I get : Login failed. Username or password incorrect. for all users.

Via ssh : 

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!

Someone could be eavesdropping on you right now (man-in-the-middle attack)!

It is also possible that a host key has just been changed.

The fingerprint for the ECDSA key sent by the remote host is

SHA256:Gf7Uh8T3grCB8jWTnfL4S210VWT6ZVjzR8syyY4p758.

Please contact your system administrator.

Add correct host key in /Users/achams/.ssh/known_hosts to get rid of this message.

Offending ECDSA key in /Users/achams/.ssh/known_hosts:11

ECDSA host key for 192.168.1.221 has changed and you have requested strict checking.

Host key verification failed.

Connection via consol and :10000 is working...

Thanks.

(CID:153550924)

[DCIM_Support]

This usually happens when the certificate on the server has changed.
Most likely you had a server with the same ip/url earlier and are now replacing it with this newly installed server. 
Since the old servers certificate has been trusted to represent this ip/url the new servers certificate is denied, even though it is valid.

Possible mitigations is:
1) Replace the certificate on the new server with the certificate from the old server.
or
2) Remove the entry in known_hosts, so the new certificate can be trusted.

I would recommend the 2nd option since the old servers certificate could run out-of-date soon, depending on the certificate.

(CID:153550922)

[DCIM_Support]

Hi,

I did option 2, and SSH now is working... but https still not working...

any other thing to do?

Thanks for your great help...

(CID:153550926)

[DCIM_Support]

Hi Ali,

Please see my answer, thanks.

Kind regards

(CID:153551255)

[DCIM_Support · Accepted solution]

Hi Ali,

The Error notification "It seems the server was installed in the future. Please verify the server time is correct and reinstall the server. " seems to be general both for DCO 8.x and ITA 9.x. This will be fixed as soon as possible.

However, that dose not seem to affect the server (DCO/ITA) functionalities! I have verified this both on my already running DCO and ITA servers plus clean setups.

I have run additional/dedicated clean installation (8.1) test moment ago without any problem at all. Even-though the server webmin interface (Status and Setup page) displaying the above mentioned notification, however server can be accessed without any problem, that included both web- and desktop client.

If you are unable to access or use the system after installation, I guess either the installation might have been unsuccessful or probably/likely there might have been some manual system modifications.

So I would suggest to make a clean installation and then restoring the latest backup file (if there is such).

It is also highly recommended to update the product to latest release (depending on your/customers requirements either to DCO/ITA currently DCO 8.3.2 or ITA 9.0.4). 

For product download info, you/customer would need to contact the local tech support. To contact local tech support, go to http://www.apc.com/support/contact/index.cfm and select your country/region. There you'll find contact information to Technical Support in you region.

Please be prepared that they may ask for valid support contract.

Kind regards

(CID:153551253)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.