CRL mode does not get updated on the secondary site after ECA is renewed on a cluster on which disaster recovery is configured

When adding ECA certificate on a cluster on which disaster recovery is configured, you must not set the CRL mode as No Change. If you have set the CRL mode as No Change and you renew ECA, it fails as the secondary site does not have CRL mode entries. (IA-40121)

Workaround:

Choose the same CRL mode as what was selected on the primary before disaster recovery configuration.