AWS - Glacier - Helper Appliance - Failed to retrieve certificate from bucket

[sreejiths]

Please shed some light.

Support ticket # 07054043

Set up in simple form.
On premise server over Vmware infra, performance tier on cheap lenovo disks..offloading to S3 via direct connect - working fine. (done via xml edit as per KB)
Archive tier repo added successfully.
Archive tier offload job fails with error.. task failed. Error: Failed to retrieve certificate from https://bucket.vpce-0.....3.me-central-1.vpce.amazonaws.com.


Bucket is under VPCE (not public)- - https://bucket.vpce-qsw0ea.....s3.me-central-1.vpce.amazonaws.com.

Validated:
Appliance is created successfully. able to ssh from VBR on premise. no ports blocked, no ssl inspections, no error on on-prem firewalls.
No error logs found in AWS end.


Any tricks?

[Mildur]

Hello Sreejith

I have replaced the number you have provided. It was your contract number (#02*******).
Case number do start with #07.
To escalate the case, please use our Talk to a manager option in the case portal This will make support management aware of the case.
--> https://www.veeam.com/kb2320

May I ask, have you run the tests proposed from KB4320?
https://www.veeam.com/kb4320

Best,
Fabian

[sreejiths]

yes, the tests were successful .
Telnet works fine the logs are shared in the ticket as well.

[sreejiths]

The ports, 2500-5000 are already opened for the ip range ... moreover didn't find anything suspicious in VPC and on prem firewall logs..
Any insight would be great !

[mod] debug logs removed as per forum rules

[Anuj]

Hi Sreejith,
Did you end up resolving this issue? If so could you please share the details,
I've come across exactly the same issue.
Much appreciated.

Thanks

Regards

Anuj

[TshepoM]

Hi @anuj i have exactly the same issue how did u resolve yours

[Mildur]

Hi all

Please provide case numbers.

Unfortunately „I have the same issue“ doesn‘t help to solve a technical issue and is against our forum policy when no case number was provided with it: veeam-backup-replication-f2/rules-of-po ... -t755.html

A solution for one customer may not work for another one.
When you open a support case, our support engineer will compare the log file against known issues snd provide you with a solution (if it helps in your situation). We cannot do that from a forum post.

Best,
Fabian

[TshepoM]

Hi Guys

Please help its been now over 2 months veeam advanced team troubleshooting this isssue for us with no luck can u just maybe share your resolution we not troublewshooting but sharing how our issue was resolved that could maybe help

Case #07268823

Regards

[TshepoM]

We have managed to resolve the issue sad to say our issue was a firewall issue were port 443 and 80 were not fully opened.

[Mildur]

Hi Tshepo

Thank you for the feedback.
I'm glad you found a solution for the issue.

Best,
Fabian

[ibarizz]

Hello people,

I'm encountering what appears to be the same issue described in the parent thread: I'm unable to offload data to the archive tier. My initial assessment suggests this may be related to firewall configurations, though we've reviewed the setup and haven't identified any explicit blocks or issues in that area.

For reference, the case number is #07490302.

I’d appreciate any guidance or recommendations to help resolve this.

Thank you, and best regards.

[Mildur]

Hello ibarizz

Unfortunately the case notes are not in english. Please keep working for now with your case engineer. You may ask for a case escalation if you believe the case is going nowhere.

Best,
Fabian

[pouya]

Hey guys, just wanted to add our two cents onto this. If you are using direct connect, make sure you have added the ObjectStorageTlsRevocationCheck regkey on ALL your gateway servers, not just the Veeam server. We were scratching our heads for some time before realising we missed this crucial part....