Unable to establish a Trust, after experiencing Active Directory sync problems.
|Article:TECH196158|||||Created: 2012-09-05|||||Updated: 2012-09-05|||||Article URL http://www.symantec.com/docs/TECH196158|
The Backup Exec 2012 software had been working. The user had experienced a time sync problem with their Active Directory environment, after which Backup Exec no longer could establish a security trust authentication, to the remote agents running on all of his physical and virtual guest machines. This prevented any backup jobs from getting submitted.
"Backup Exec cannot establish a trust with the remote computer because an SSL connection cannot be set up.
You can attempt to resolve this issue by re-establishing the trust between the Backup Exec server and the remote computer"
Calling Method 'SetServerTrust'
BEMSDK Method 'MediaServerAdvertisementUpdate'
BEMSDK Failure Code: -536831088:X88
Windows 2008 R2 on media server
Problem with the security certificates used by Backup Exec on the media server to establish a "trust" with the remote agents running on the remote servers. The problems with Active Directory apparently rendered the certificates invalid on the media server.
Steps to re-enable trust relationships with remote agents:
1. Stop Backup Exec services on the media server.
2. Move the certificates files from the Backup Exec DATA folder to a "SAVED" folder. These files have a *.CRT and *.KEY file extension.
3. Restart the Backup Exec services.
4. Right click the mouse on the server icons in the Backup Exec console and select "Establish Trust" This action will re-create the security certificates on the media server in the DATA folder between the media server and remote agent.
Backup jobs should now be able to be submitted.
Note: If the "trusts" are successfully established, then the "SAVED" folder and contents can be deleted from the server.
Article URL http://www.symantec.com/docs/TECH196158