Problem description
The Enterprise Workload Agent activation failed with the following error message:
Traceback
Failed to activate. Resource not found Error in discovering URLS. Error in discovering service PhoenixSyncServer using activation token: Post "https://phoenix-globalapis.druva.com : 443/directorysvc/v1/ services/ PhoenixSyncServer/deviceToken" : x509: certificate signed by unknown authority
Cause
The firewall changes the certificate's Canonical Name (CN) field, resulting in certificate validation failure.
In this screenshot, we can see that the CN field is changed by the firewall
Resolution
To troubleshoot this issue run the following command on the machine:
openssl.exe s_client -connect phoenix.druva.com:443 -briefValidate the output results.
Add *.druva.com to the exclusion list in SSL inspection of firewall list to prevent the certificate validation issue. Refer Firewall, Antivirus and Network Configuration for Druva Enterprise Workloads | Druva | Documentation
After adding the exclusion in the SSL inspection in the firewall following are the results:
Rerun the activation using the activation token.
Note: If the issue persists, please schedule a server reboot during non-business hours and retry the activation. A reboot can help refresh the certificate store or network services, potentially resolving the SSL validation error and allowing for successful agent activation.