Unable to establish a Trust, after experiencing Active Directory sync problems.

Article:TECH196158  |  Created: 2012-09-05  |  Updated: 2012-09-05  |  Article URL http://www.symantec.com/docs/TECH196158
Article Type
Technical Solution

Product(s)

Environment

Issue



The Backup Exec 2012 software had been working.   The user had experienced a time sync problem with their Active Directory environment, after which Backup Exec no longer could establish a security trust authentication, to the remote agents running on all of his physical and virtual guest machines.     This prevented any backup jobs from getting submitted.


Error



"Backup Exec cannot establish a trust with the remote computer because an SSL connection cannot be set up.
You can attempt to resolve this issue by re-establishing  the trust  between the Backup Exec server and the remote computer"

Additional detail:

Calling Method 'SetServerTrust'
BEMSDK Method 'MediaServerAdvertisementUpdate'
BEMSDK Failure Code:  -536831088:X88
 


Environment



Windows 2008 R2 on media server


Cause



Problem with the security certificates used by Backup Exec on the media server to establish a "trust" with the remote agents running on the remote servers.    The problems with Active Directory apparently rendered the certificates invalid on the media server. 


Solution



Steps to re-enable trust relationships with remote agents:

1.  Stop Backup Exec services on the media server.

2.  Move the certificates files from the Backup Exec DATA folder to a "SAVED" folder.   These files have a *.CRT and *.KEY file extension.  

3.  Restart the Backup Exec services.

4.  Right click the mouse on the server icons in the Backup Exec console and select "Establish Trust"  This action will re-create the security certificates on the media server in the DATA folder between the media server and remote agent.  

Backup jobs should now be able to be submitted.

Note:  If the "trusts" are successfully established, then the "SAVED" folder and contents can be deleted from the server. 





Article URL http://www.symantec.com/docs/TECH196158


Terms of use for this information are found in Legal Notices