Not discovering remote array on new installed Solutions Enabler Host

Hi. We have installed a new SE host version 9.1 to manage 2 VMAX AFA running 5978.221.221

I'm not discovering the remote array (let's call it vmax2) (one is local (vmax1) and has several rdfg against the remote one).

It's weird because I've another solutions enabler (9.0) with vmax2 locally attached and it sees well both arrays.

- symsan shows each remotes ports ok.

- symrdf list shows rdf devs on both servers (on the new one they are showing in partitioned state, because of the "link failure" I guess).

- symrdf pings well on the old SE, not in the new one.

 

I've been taking a look to the storsrvd.log0 and there are two errors:

=============================================

        [18770             Listener] Apr-15 18:06:48.088 : storsrvd Starting, Version: V9.1-2551 (0.5) [RT]

[18770         API_Listener] Apr-15 18:06:48.146 pdsSSLSetFileUsage       #3033  : SSL_CTX_use_certificate_file() failed:  [SSL Error: 0x140ad002 - error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib]

[18770         API_Listener] Apr-15 18:06:48.146 : ANR0142E Certificate establishment failed with rc=700004026 ([PDS/Sock] SSL object or attribute could not be set [SSL Error: 0x140ad002 - error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib])

[18770         API_Listener] Apr-15 18:06:48.146 : ANR0152E Issue detected with server certificate file /var/symapi/config/cert/symapisrv_cert_v9.0.pem

        [18770             Listener] Apr-15 18:06:50.147 : storsrvd Exiting

        [18770             Listener] Apr-15 18:06:50.147 :

=============================================

Taking a look to an old SE installation guide, it refers this:

ANR0142E

function establishment failed with rc= returncode (error_message)

Destination: Log. Description: During SSL initialization, the component referred to by function failed to be established. If function is CERTIFICATE or PRIVATE KEY, then the symapisrv_cert.pem file may be damaged or it may not have been successfully copied to the SYMAPI configuration directory.

Operator Action: If server certificate and key files are not installed by default on the platform where the server is running, additional installation steps are necessary. Refer to the platform specific installation instructions to install the files. You can specify NONSECURE for the security level if desired; in which case, the server will not attempt to load the certificate and key files.

 

ANR0152E

Issue detected with server certificate file filename Destination: Log.

Description: This message is issued during initialization of the secure library. A problem with the certificate file has been detected.

Operator Action: Check for the existence of the certificate file on the server. If you have set the security_alt_cert_file parameter in the daemon_options file, verify that it points to a valid file.

 

Looking at the daemon_options file, there are two lines (both commented):

# storsrvd:SECURITY_ALT_CERT_FILE  = symapisrv_cert_v9.0.pem

# storsrvd:SECURITY_ALT_KEY_FILE  = symapisrv_key_v9.0.pem

 

So should I use those certs?

any suggestion?

 

thanks!