DD Admin GUI tomcat error

So this is by trying to access the DD's own web gui, not through DDMC?

Is there any trust established with another DD, for example to be able to replicate data between them? as would be shown by:

# adminaccess trust show

As you are asking questions here, you don't have any active support, nor access to the Dell KB?

Below command might show that the java backend, used by the DD web GUI is not able to start (ERROR [main] Exception during command execution: java.security.cert.CertificateException - Invalid X.509 Certificate version., will retry, Attempt# 1) due to some issues with earlier certificates.

# log view debug/sm/em.info

If KB https://www.dell.com/community/Data-Domain/DD-Admin-GUI-tomcat-error/m-p/8278047#M5444 applies, then you might have to delete and re-establish the trust with any and all DD's and DDMC's as described in above KB article. It might also need the self-signed cert on the interfering DD to be recreated.

"# adminaccess trust del host dd-trusted-1 type mutual

Note removing trust will cause replication set up with the now untrusted DD to fail until trust has been re-established. If removing trust fails because the remote DD is no longer reachable or does not even exist, repeat the command without the "mutual" option, to only remove trust locally, as that's sufficient to get the GUI to work again.

The GUI on the troubled DD or DDMC should now be accesible, although you may need to give it a restart manually and try again (note the GUI can take up to 2 minutes to fully load despite the commands in the CLI returning quickly) :

# adminaccess disable https
# adminaccess disable http
# adminaccess enable http
# adminaccess enable https

To re-establish trust, you would need to first make sure the DD CA certificate in "dd-trusted-1" is re-created without any errors. From this host command line, do so by running the command below, and follow the prompts if any : 

# adminaccess certificate generate self-signed-cert regenerate-ca

Note if this DD has trust established with other DDs or replication , you need to delete and then re-add trust for all such peers.

Finally, to re-add trust in between "DD-A" and "DD-B", either :

- Run "adminaccess trust add host DD-A type mutual" from "DD-B" or:

- Run "adminaccess trust add host DD-B type mutual" from "DD-A":

"

Above are just a few hints from said KB article (I changed the names of the DD from the example commands). Better look at the complete KB article however, which also references a couple of other KB articles, mainly dealing with upgrades to DDOS7.x however.

Data Domain: Web UI Inaccessible Due to Expired https Certificate | Dell US

# adminaccess certificate generate self-signed-cert regenerate-ca