Support Portal

Welcome, Guest Login

Support Center

Cluster Splits on Service Restart or System Reboot

Last Updated: Jul 17, 2017 02:46PM PDT

Applies to...

  • DxEnterprise 15.5

Summary

When DxEnterprise services are restarted or a cluster member is rebooted, the cluster can temporarily split and failovers can occur.

Information

When DxEnterprise performs a cryptographic handshake with another server, Windows will check that its root certificates are up to date.  To do so, Windows will perform a DNS lookup of Microsoft’s Windows Update service.  If DNS is unavailable, or internet connectivity is limited, it will fail, and will delay the DxEnterprise handshake process by 12-15 seconds.  This delay will cause timeouts and cluster negotiation failures.

The problem can be identified by the following errors in the DH2i Event Log:

Log Name: DH2i
Source: DxCMonitor
Date: <Date_Time>
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: <Username>
Computer: <Node>
Description: HandshakeAsync(): spent <Time>ms

Log Name: DH2i
Source: DxCMonitor
Date: <Date_Time>
Event ID: 1001
Task Category: None
Level: Error
Keywords: Classic
User: <Username>
Computer: <Node>
Description: ConnectToCoordinatorThread caught exception: System.Exception: Failed to sync with coordinator: Synchronization denied

Resolution

To work around this, the following method is recommended:

  1. Open the Group Policy Editor, “gpedit.msc”
  2. Select “Computer Configuraton” > “Windows Settings” > “Security Settings” > “Public Key Policies” > “Certificate Path Validation Settings”
  3. Select the “Network Retrieval” tab
  4. Check “Define these policy settings”
  5. Un-check “Automatically update certificates in the Microsoft Root Certificate Program”
  6. Click “OK”
  7. Then, open a command prompt as administrator, and run: "gpupdate /force"

References

For additional information, please see the following Microsoft KB:
An automatic updater of untrusted certificates is available for Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2

Note: In our testing, the above Microsoft KB article also applies to Windows Server 2012 R2.

Contact Us

support.desk@dh2i.com
http://assets2.desk.com/
false
desk
Loading
seconds ago
a minute ago
minutes ago
an hour ago
hours ago
a day ago
days ago
about
false
Invalid characters found
/customer/en/portal/articles/autocomplete