What Can I Do If A Quorum Link Fails To Be Added Because The Hypermetro Arbitration Certificate Becomes Invalid Or The System Time Becomes Abnormal - Huawei OceanStor 2000 V3 Series Features Manual

OceanStor V3 Series
HyperMetro Feature Guide for Block
6.1 What Can I Do If a Quorum Link Fails to Be Added
Because the HyperMetro Arbitration Certificate Becomes
Invalid or the System Time Becomes Abnormal?
Question
The quorum server software is newly installed, the quorum server communicates with storage
arrays properly, and the configurations on the quorum server are correct. However, a quorum
link of the quorum server fails to be added on a storage array. The storage array reports a
communication error or an invalid certificate. What can I do if the problem occurs?
Answer
The validity period of the default HyperMetro arbitration certificate is 10 years (start from
September 2015). The arbitration certificate will become invalid if the system time of the
quorum server or a storage array is incorrectly set to a value that exceeds the validity period
of the certificate.
Possible causes are as follows:
l
l
Perform the following operations:
Step 1 Check whether the HyperMetro arbitration certificate on the quorum server is valid.
1.
2.
Step 2 Check whether the system time of the quorum server is incorrectly set.
Run the date command to check the system time of the quorum server.
l
l
Step 3 Check whether the HyperMetro arbitration certificate on the storage array is valid.
1.
Issue 05 (2018-01-30)
The system time of the quorum server is incorrectly set to a value that exceeds the
validity period of the default arbitration certificate. As a result, the quorum link fails to
be added.
The system time of a storage array is incorrectly set to a value that exceeds the validity
period of the default arbitration certificate. As a result, the quorum link fails to be added.
In any directory of the quorum server's operating system, run the qsadmin command to
open the arbitration software.
In the CLI of the arbitration software, run the show tls_cert command to check whether
the HyperMetro arbitration certificate is valid.
NOTE
If State is Valid, the HyperMetro arbitration certificate is valid.
– If the HyperMetro arbitration certificate is valid, go to
– If the HyperMetro arbitration certificate is invalid, go to
If the system time of the quorum server is correct, go to
If the system time of the quorum server is incorrect, modify the system time and restart
the quorum server. Then add the certificates again. If the quorum link still fails to be
added after the quorum server is restarted, go to
Log in to OceanStor DeviceManager of the storage array. Choose Settings > Storage
Settings > Value-added Service Settings > Credential Management to go to the
certificate management page.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Step 3.
Step 2.
Step 3.
Step 3.
6 FAQs
136