I am getting the error “Advance Recovery module missing on secondary system. Please install or enable it.” when I try to Quick Configure the advanced recovery module. This is on a new install of FreePBX 17. Both have identical configs.
I have verified that both nodes have Advanced Recovery installed, and they both show “Commercial Status: Licensed”. I’ve run fwconsole advr --precheck <the other server IP>
on both and both say “SSH Connectivity is good”. I can SSH from one to the other without a password (as asterisk user).
I’ve run a packet capture between the two servers during configuration, and everything seems to be flowing correctly.
When I run quick configure on the primary the adv_recovery.log on the primary server shows the following (the secondary server adv_recovery.log shows nothing):
2026-02-10 09:11:49 - genApiAndFilestore On Secondary Array
(
[module] => adv_recovery
[command] => genapiandfilestore
[serverip] => 10.70.2.20
[warmspare_remoteapi_gql] => https://10.70.2.20/admin/api/api/gql
[warmspare_remoteapi_accesstokenurl] => https://10.70.2.20/admin/api/api/token
)
2026-02-10 09:11:50 - precheckSecSystem result : Run Advance Recovery: fwconsole advr --run
Generate API Credentials : fwconsole advr --genapi
2026-02-10 09:11:50 - Generating API credentials successfull Array
(
[client_id] => <id>
[client_secret] => <secret>
[status] => 1
)
2026-02-10 09:11:50 - filestore entry created Array
(
[client_id] => <id>
[client_secret] => <secret>
[status] => 1
[filestoreid] => SSH_<anotherid>
)
2026-02-10 09:11:50 - Advance Recovery Error There is some error in Standby Server
I tried the quick configure on the secondary server as a test. I get the same error. The adv_recovery.log on the secondary shows the following (primary server adv_recovery.log shows nothing):
2026-02-10 09:12:07 - genApiAndFilestore On Secondary Array
(
[module] => adv_recovery
[command] => genapiandfilestore
[serverip] => 10.70.1.20
[warmspare_remoteapi_gql] => http://10.70.1.20/admin/api/api/gql
[warmspare_remoteapi_accesstokenurl] => http://10.70.1.20/admin/api/api/token
)
2026-02-10 09:12:07 - precheckSecSystem exception result : The command "'ssh' '-t' '-i' '/home/asterisk/.ssh/id_ecdsa' '[email protected]' '/usr/sbin/fwconsole advr'" failed.
Exit Code: 255(Unknown error)
Working directory: /var/www/html/admin
Output:
================
Error Output:
================
Pseudo-terminal will not be allocated because stdin is not a terminal.
Host key verification failed.
2026-02-10 09:12:07 - precheckSecSystem failed result : ERROR Connecting to 10.70.1.20 Server. Please make sure SSH to 10.70.1.20 server is configured properly.
I tried running the problem command above on both servers (as asterisk user) pointing at the other server, and both seem to finish without error.
Primary:
'ssh' '-t' '-i' '/home/asterisk/.ssh/id_ecdsa' '[email protected]' '/usr/sbin/fwconsole advr'
Run Advance Recovery: fwconsole advr --run
Generate API Credentials : fwconsole advr --genapi
Connection to 10.70.2.20 closed.
Secondary:
'ssh' '-t' '-i' '/home/asterisk/.ssh/id_ecdsa' '[email protected]' '/usr/sbin/fwconsole advr'
Run Advance Recovery: fwconsole advr --run
Generate API Credentials : fwconsole advr --genapi
Connection to 10.70.1.20 closed.
I removed /home/asterisk/.ssh/known_hosts and then reran fwconsole advr --precheck on both servers. I still get the error when I run Quick Configure on the primary server but now when I run Quick Configure on the secondary server, it works. That server is all set up to be the secondary server, so I don’t want to run Quick configure in that direction.
After a lot of other messing about I changed the default API urls from https to http and quick configure worked. I was then able to modify the urls back to https after the Advanced Recovery quick configure was complete.