I am running the following version for ACE module
Version A2(2.0) [build 3.0(0)A2(2.0)]
We are offloading SSL on ACE. The Production module failed over to the secondary, the certificate configurations 'cypto chaingroup' on the earlier primary (now secondary) lost all the root certificate configurations and the ft group status became ACTIVE / COLD.
While accessing the website in this state gave certificate errors even though the old secondary (now Primary) unit had the certificate configurations in place.
Please advise whether this is a normal behaviour in ACTIVE / COLD state while the active unit has the correct configurations. Also could you advise from the below logs what was the reason for failover. All the groups had failed over one after the other.
>sh ft history ha_mgr
1:164 => Aug 04 19:13:17: ha_process_message:1891 Recd MTS_OPC_CFG_SYNC_STATUS f
or FT Group 1
1:165 => Aug 04 19:13:17: ha_process_message:1924 Running sync info: mode 1, sta
tus 1, reason Error on Standby device when applying configuration file replicate
d from active
1:166 => Aug 04 19:13:17: ha_process_message:1928 Startup sync info: mode 1, sta
tus 0, reason Startup configuration sync has completed
1:167 => Aug 04 19:13:17: fsm_ft_action:205 FSM: FT Group 1, Current State FSM_F
T_STATE_STANDBY_CONFIG, Event FSM_FT_EV_CFG_SYNC_STATUS
1:168 => Aug 04 19:13:17: fsm_ft_check_cfg_sync:1301 Config-Sync failed, rc 1
1:169 => Aug 04 19:13:17: fsm_ft_goto_standby_cold_state:544 Stopping the timer
for FT 1 state FSM_FT_STATE_STANDBY_CONFIG
1:170 => Aug 04 19:13:17: notify_contexts:101 Notifying FT Group 1, Opcode MTS_O
2:171 => Aug 04 19:13:17: ft_state_change:40 FSM State Change for Ft Group 1, Ol
d State FSM_FT_STATE_STANDBY_CONFIG New State FSM_FT_STATE_STANDBY_COLD Event FS
2:172 => Aug 04 19:13:17: send_ft_state_to_peer:246 Sending FT State Update to P
eer.FT Group 1, FT State FSM_FT_STATE_STANDBY_COLD, Config Priority 200, Net Pr
iority 200, Preempt 0 peer msg compatible true
2:173 => Aug 04 19:13:17: fsm_ft_action:211 FSM: pre_action function failed.
2:174 => Aug 04 19:13:22: handle_mts_message:3485 HA MGR: Received MTS notif, fr
om: 0x00000301/526, To: 0x00000301/509, Opcode: MTS_OPC_CFG_SYNC_STATUS(4042), M