AI Asset Manager - Upgrade Target Connection Error

0
Hi,   I’m trying to "update target connection" in AI Asset Manager to deploy pipelines to AI Inference Server, but when I click to proceed, I get the following error:   " Error occurred during onboarding agent. code: cerror.unknown.code Unknown error occurred: error.ied.certificate.hostname.mismatch. "   Is it necessary to add any configuration during the installation of one of the applications? I installed both applications using the default configurations, and they are running on the same Edge Device.   Versions: AI Asset Manager: 2.4.0 AI Inference Server - 3 pipelines: 2.6.0
asked
1 answers
0

Hi Marcos,

 

Thanks for reaching out on the forum and for sharing the details. I checked this with our R&D team - here is what the error means and what we suggest next.

 

The error error.ied.certificate.hostname.mismatch typically happens when AI Asset Manager retrieves the edge device’s IP addresses and its HTTPS certificate, then tries to find an address that the certificate is actually valid for. It could not match any of the device's reachable IPs/DNS names to the certificate's Subject Alternative Name (SAN) entries, so onboarding fails (because the agent (AIIS) needs the IP + cert to connect over HTTPS).

 

In short: this most likely points to a certificate misconfiguration on the edge device / inference server endpoint.

 

In this case, here are some thing to verify (quick checks)

Inspect the device certificate

  • Open the device URL in a browser (the same address you use to reach the device) and view the certificate details, or

  • Download the certificate from the device settings page (if available).

Check SAN entries

  • Confirm the certificate contains the IP address and/or DNS name you are using to reach the device (and the one reachable from where the agent runs).

  • The SAN should include the IP/DNS.

 

To answer your additional questions:

Is extra configuration needed during installation?

Usually no, as long as the certificate matches how the device is accessed. With default installs this normally works - issues tend to appear when the cert does not include the actually-used IP/DNS.

 

In order to diagnose the issue further and to provide you with the best support we would need some additional information.

Could you please share with us:

  1. Network architecture

    • Any firewall, proxy, reverse proxy, or TLS inspection in between?

  2. Edge device details

    • Edge device version

    • Network settings:

      • How many NICs (Network interfaces) do you have enabled/ are you using?

      • What is the NIC settings? Is the IP set static vs via DHCP?

      • Any Layer 2 setup? E.g., to connect to cameras via Vision Connector?

  3. How you connect

    • Are you connecting via IEM (remote connection) or directly on the same network via IP/DNS name?

  4. Logs

    • Please download logs from both AI Inference Server and AI Asset Manager.

    • In the IED app overview, click the three dots (⋮) and select Download logs.

  5. Anything else

    • Any "non-standard" setup details that might matter.

 

If you want, paste the SAN section of the certificate (feel free to redact anything sensitive) plus the IP/DNS you use to access the device, and we can confirm the mismatch quickly.

 

Hope I could shed some light on the matter! Let me know if you have any more questions in the meantime.

answered