What Can I Do If a Quorum Link Fails to Be Added Because the HyperMetro Arbitration Certificate Becomes Invalid or the System Time Becomes Abnormal?

Symptom

The quorum server software is newly installed. The quorum server is correctly configured and is communicating with the storage systems properly. However, a quorum link fails to be added to a storage system. The storage system reports a communication error or an invalid certificate.

Answer

The validity period of the default arbitration certificate is 10 years. The arbitration certificate will become invalid if the system time of the quorum server or the storage system is incorrectly set to a value that exceeds the validity period of the certificate.

Perform the following operations:

1. Check whether the HyperMetro arbitration certificate on the quorum server is valid.
   1. In any directory of the quorum server's operating system, run the qsadmin command to open the quorum server software.
   2. In the CLI of the quorum server software, run the show tls_cert command to check whether the HyperMetro arbitration certificate is valid.

   If State is Valid, the HyperMetro arbitration certificate is valid.

   • If the certificate is valid, go to Step 3.
   • If the certificate is invalid, go to Step 2.

2. Check whether the system time of the quorum server is correct.

   Run the date command to check the system time.

   • If the system time is correct, go to Step 3.
   • If the system time is incorrect, modify it and restart the quorum server. Then add the link again. If the quorum link still fails to be added, go to Step 3.

3. Check whether the HyperMetro arbitration certificate on the storage system is valid.
   1. Log in to DeviceManager of the storage system. Choose Settings > Certificate Management.
   2. On the certificate management page, check the validity of the HyperMetro arbitration certificate.
      • If the certificate is valid, go to Step 5.
      • If the certificate is invalid, go to Step 4.

4. Check whether the system time of the storage system is correct.

   Log in to DeviceManager of the storage system. Choose Settings > Basic Information > Device Time to check the system time of the storage system.

   • If the system time is correct, go to Step 5.
   • If the system time is incorrect, modify it. Then add the link again. If the quorum link still fails to be added, go to Step 5.

5. Contact Huawei technical support for assistance.