Forum Discussion

robertoaxity's avatar
robertoaxity
Moderator
5 years ago

Error 7658 backup client Linux Redhat

Hello, When execute the manual policy i have the next error code 7658. : (7658) Connection cannot be established because the host validation cannot be performed on the target Clien Properties: T...
8
Linux
  • Krutons's avatar
    Krutons
    5 years ago

    Is this a net new client in your environment? Like you haven't had another client with same IP/Name before?

    You could blow away all the certs on the client and rebuild. Run these from the client.

    nbcertcmd -listCACertdetails

    Copy the SHA1 fingerprint for the next command.
    nbcertcmd -removeCACertificate -fingerPrint

    Paste the fingerprint.

    nbcertcmd -deleteAllCertificates

    nbcertcmd -getCACertificate -server <master>

    Use the reissue token you created.

    nbcertcmd -getCertificate -server <master> -token

robertoaxity's avatar
robertoaxity
Moderator

I use the command,

[e-rflores@ldrpsoaapp01 bin]$ sudo ./nbcertcmd -getCRL
Successfully refreshed certificate revocation list for lprvnetbkp01.
Successfully refreshed security level for lprvnetbkp01.

But the error continue.

Regards

 

Krutons's avatar
Krutons
Moderator
5 years ago

right click the revoked cert and generate a reissue cert.

then run <install path>/bin/nbcertcmd -getcertificate -server <master> -token

Then paste the reissue cert, let me know if that resolves your problem.

  • robertoaxity's avatar
    robertoaxity
    Moderator
    5 years ago

    Hello,

    I use the command in the client

    [e-rflores@ldrpsoaapp01 bin]$ sudo ./nbcertcmd -getcertificate -server lprvnetbkp01 -token
    Authorization Token:
    Host certificate and certificate revocation list already exist for master server [lprvnetbkp01]

    But in the GUI master still revoked certificate and the error is the same.

    Regards

     

    • Krutons's avatar
      Krutons
      Moderator
      5 years ago

      Is this a net new client in your environment? Like you haven't had another client with same IP/Name before?

      You could blow away all the certs on the client and rebuild. Run these from the client.

      nbcertcmd -listCACertdetails

      Copy the SHA1 fingerprint for the next command.
      nbcertcmd -removeCACertificate -fingerPrint

      Paste the fingerprint.

      nbcertcmd -deleteAllCertificates

      nbcertcmd -getCACertificate -server <master>

      Use the reissue token you created.

      nbcertcmd -getCertificate -server <master> -token

      • robertoaxity's avatar
        robertoaxity
        Moderator
        5 years ago

        Krutons,

        You are awesome, now the client connect correctly, thanks very much for your help.

        Regards