Troubleshooting the deployment of packages
This topic lists troubleshooting tips that you can use if you run into problems when deploying packages using the TrueSight console.
Security certificate not found error message
From the Deployment and Installation Summary page, the PATROL Agent Details page displays a Security certificate not found on the Integration Service
error message.
Solution
Ensure that the same certificate is present on both the Presentation Server and the Integration Service host. Perform the following steps for all instances of the Integration Service on the same or on any other computer.
Log on to the host computer where the Presentation Server is installed.
The keytool utility that is used to generate and import the certificates is present in the <TrueSight Presentation Server Installation Directory>\jre\bin directory. Add this directory path to the
PATH
environment variable by running the following command:UNIX:
export PATH=$PATH:$TRUESIGHTPSERVER_HOME/truesightpserver/modules/jre/bin/
Windows:
set PATH=%PATH%;%TRUESIGHTPSERVER_HOME%\truesightpserver\modules\jre\bin
Run the keytool command as follows:
keytool -export -alias truesightserver -file <filename.cer> -keystore $TRUESIGHTPSERVER_HOME/truesightpserver/conf/secure/loginvault.ks -storepass changeit
ExampleUNIX:
keytool -export -alias truesightserver -file truesight.cer -keystore $TRUESIGHTPSERVER_HOME/truesightpserver/conf/secure/loginvault.ks -storepass changeit
Windows:
keytool.exe -export -alias truesightserver -file truesight.cer -keystore %TRUESIGHTPSERVER_HOME%\truesightpserver\conf\secure\loginvault.ks -storepass changeit
Copy the truesight.cer file that is generated at the following temporary location on the Integration Service System:
UNIX: /tmp
Windows: C:\temp
The steps for updating the system PATH environment variable must be added to be executed on the system where Integration Service is installed. Add the directory path to the PATH environment variable by running one of the following commands:
Remote IS
UNIX:export PATH=$PATH:$BPPM_AGENT_HOME/Agent/jre/bin/
Windows:set PATH=%PATH%;%BPPM_AGENT_HOME%\Agent\jre\bin
Local IS
Unix:export PATH=$PATH:$BPPM_SERVER_HOME/pw/jre/bin/
Windows:set PATH=%PATH%;%BPPM_SERVER_HOME%\pw\jre\bin
On the Integration Service server, use the
keytool -importcert -alias <aliasname> -file <cert file location> -keystore "<keystore location>" -storepass changeit
command to import the certificate in one of the following folders:Remote IS: <installation_directory>/TSIMAgent/Agent/jre/lib/security/cacerts
Examples
UNIX:keytool -importcert -alias truesightserver -file /tmp/truesight.cer -keystore "$BPPM_AGENT_HOME/Agent/jre/lib/security/cacerts" -storepass changeit
Windows:keytool.exe -importcert -alias truesightserver -file C:\temp\truesight.cer -keystore "%BPPM_AGENT_HOME%\Agent\jre\lib\security\cacerts" -storepass changeit
Local IS: <installation_directory>/TrueSight/pw/jre/lib/security/cacerts
Examples
Unix:keytool -importcert -alias truesightserver -file /tmp/truesight.cer -keystore "$BPPM_SERVER_HOME/pw/jre/lib/security/cacerts" -storepass changeit
Windows:keytool.exe -importcert -alias truesightserver -file C:\temp\truesight.cer -keystore "%BPPM_SERVER_HOME%\pw\jre\lib\security\cacerts" -storepass changeit
For Unix, perform the following steps to restart the Integration Service:
Open the Command Prompt.
Navigate to one of the following directories:
Remote IS: $BPPM_AGENT_HOME/Agent/pronto/bin
Local IS: $BPPM_SERVER_HOME/pw/pronto/binExecute the following commands to restart the Integration Service
./pw is stop
./pw is start
For Windows, restart the Integration Service [ProNetAgent] by using Windows Services.
Deploying packages to PATROL Agents running on IBM AIX fails
When you deploy a package to a PATROL Agent running on IBM AIX, it fails. The RunSilentInstall log file contains the following error:
ERROR: PatrolAgent Cannot bind to RT Server - tcp:localhost:2059 smux bind failure: Address already in use
/opt/bmc/PatrolAgent/Patrol3//AIX7.1-64/bin/snmpmagt: error processing configuration The installation completed successfully.
Solution
- Before deploying the package, stop the SNMP daemon by running the following command:
stopsrc -s snmpd
- Deploy the package.
- Start the SNMP daemon by running the following command:
startsrc -s snmpd
Deploying packages to PATROL Agents fails due to incorrect host name reference
In certain environments, deploying packages to PATROL Agents might fail due to an incorrect Presentation Server host name reference.
Use the Presentation Server external alias instead. Ensure that this host name is accessible from the Integration Service.
- Run the following command from the <Presentation Server installation directory>\truesightpserver\bin folder:
tssh properties set CHUNK_URL_HOSTNAME <external_alias>
- Run the following command to apply the updated setting:
tssh properties reload
Comments
A few notes and corrections for the Security Certificate Not Found error:
set PATH=%PATH%;%BPPM_AGENT_HOME%\agent\jre\bin
the one above is for an Infrastructure Management Server.
Importing the cert has the same path problem: keytool.exe -importcert -alias truesightserver -file <path_to_exported_cert> -keystore "%BPPM_AGENT_HOME%\agent\jre\lib\security\cacerts" -storepass changeit
ERROR 03/28 15:07:39 Agent [ISExecutor-157] IS certficate failed Missing Resource String
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1949)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:302)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)
Thank you for your comment. Here are a few responses for your comments:
-Screenshot: We will try and include a screenshot of the error in the documentation.
-Windows commands ("changeit"): "changeit" is the default of the keystore. Therefore, we have to retain it.
-Windows commands ("alias"): We recommend to use "alias" as is.
-Incorrect Windows command: The local and remote paths in the command are correct -
Remote IS: <installation_directory>/TSIMAgent/Agent/jre/lib/security/cacerts
Local IS: <installation_directory>/TrueSight/pw/jre/lib/security/cacerts
We have added the same paths in the content.
Thank you.
A few notes and corrections for the Deploying packages to PATROL Agents fails due to incorrect host name reference issue:
Thank you for your comment, Daric. I will add my response as soon as possible.
You should include a list of locations for log files or folder locations that contain deployment information in this section.
Thank you, Daric. We will try to include this information in our documentation.
Log in or register to comment.