iSCSI connection fails with "Log On to Target" error
Issue
When you try to establish a new connection from your workstation to an iSCSI share on the Datto appliance, you see an alert box titled, "Log On to Target," with either an, "Authentication Failure," or, "Initiator CHAP secret given is invalid. Maximum size of CHAP secret is 12 bytes ifIPSec is not used," error.
IMPORTANT The wording of this error may differ depending on your OS. The examples in this article are from Windows 10.
Environment
- Datto SIRIS
- Datto Alto
- Datto NAS
- Datto IRIS 3.89
- Microsoft Windows 10
Cause
After the Datto software update to IRIS 3.89, CHAP Mutual authentication requires that the CHAP secret and CHAP Mutual secret do not match. If you are using CHAP Mutual Authentication and your two CHAP authentication secrets match, you will need to change one of them.
Resolution
Figures 1 and 2 show the errors as they appear in Windows 10.
Figure 1: Authenticate failure
Figure 2: Initiator CHAP secret given is invalid
- From the Datto device GUI, navigate to FILE SHARE > Network Attached Storage
Figure 3: Network Attached Storage
- Click Configure Share Settings for the iSCSI share you need to connect.
Figure 4 Configure Share Settings
- In the CHAP Authentication box, set the CHAP Secret and Mutual CHAP Secret to two different passwords. You can click the eye icon to make the password visible.
- Click APPLY.
- Update the iSCSI connection information on your connecting machines to reflect the new passwords.
You should now be able to connect to the share. If the connection still fails, contact Datto Technical Support.