Summary
Error
Below error is seen both for PKCS12 and JKS types of certificates:
On PKCS12 systems:
nnmcluster –display
Error: The nnm.keystore file does not contain a key matching the SSL alias in
the nms-local.properties file
On JKS systems:
nnmcluster –display
Error: The nnm.keystore file does not contain a key matching the SSL alias in
the nms-local.properties file
Cause
The problem is that when the nnmcluster CLI joins the Jgroup the image of the keystores must be the same as the ones cached by the daemons when they started up. If they are different then they can’t join the cluster.
Fix
To avoid this, do not alter the certificates while the cluster daemon is running.
Before working with the certificates, make sure to:
1. Stop the daemon processes on both clusters: nnmcluster -shutdown -force
2. Check for any running daemon process:
Linux: with ps -ef | grep daemon ; ps -ef | grep cluster and use kill to terminate them, if any.
Windows: Use Task Manager to terminate the cluster daemon process.