Troubleshooting the deployment of packages


This topic lists troubleshooting tips that you can use if you run into problems when deploying packages using the TrueSight console.

Security certificate not found error message

From the Deployment and Installation Summary page, the PATROL Agent Details page displays a Security certificate not found on the Integration Service error message.

Solution

Ensure that the same certificate is present on both the Presentation Server and the Integration Service host. Perform the following steps for all instances of the Integration Service on the same or on any other computer.

  1. Log on to the host computer where the Presentation Server is installed.
  2. The keytool utility that is used to generate and import the certificates is present in the <TrueSight Presentation Server Installation Directory>\jre\bin directory. Add this directory path to the PATH environment variable by running the following command:
    • UNIX: export PATH=$PATH:$TRUESIGHTPSERVER_HOME/truesightpserver/modules/jre/bin/
    • Windows: set PATH=%PATH%;%TRUESIGHTPSERVER_HOME%\truesightpserver\modules\jre\bin
  3. Run the keytool command as follows:
    keytool -export -alias truesightserver -file <filename.cer> -keystore $TRUESIGHTPSERVER_HOME/truesightpserver/conf/secure/loginvault.ks -storepass changeitExample
    • UNIX: keytool -export -alias truesightserver -file truesight.cer -keystore $TRUESIGHTPSERVER_HOME/truesightpserver/conf/secure/loginvault.ks -storepass changeit
    • Windows: keytool.exe -export -alias truesightserver -file truesight.cer -keystore %TRUESIGHTPSERVER_HOME%\truesightpserver\conf\secure\loginvault.ks -storepass changeit
  4. Copy the truesight.cer file that is generated at the following temporary location on the Integration Service System:
    • UNIX: /tmp
    • Windows: C:\temp
  5. The steps for updating the system PATH environment variable must be added to be executed on the system where Integration Service is installed. Add the directory path to the PATH environment variable by running one of the following commands:
    • Remote IS
      UNIX: export PATH=$PATH:$BPPM_AGENT_HOME/Agent/jre/bin/Windows: set PATH=%PATH%;%BPPM_AGENT_HOME%\Agent\jre\bin 
    • Local IS
      Unix: export PATH=$PATH:$BPPM_SERVER_HOME/pw/jre/bin/
      Windows: set PATH=%PATH%;%BPPM_SERVER_HOME%\pw\jre\bin
  6. On the Integration Service server, use the keytool -importcert -alias <aliasname> -file <cert file location> -keystore "<keystore location>" -storepass changeitcommand to import the certificate in one of the following folders:
    • Remote IS: <installation_directory>/TSIMAgent/Agent/jre/lib/security/cacerts
      Examples
      UNIX: keytool -importcert -alias truesightserver -file /tmp/truesight.cer -keystore "$BPPM_AGENT_HOME/Agent/jre/lib/security/cacerts" -storepass changeit
      Windows: keytool.exe -importcert -alias truesightserver -file C:\temp\truesight.cer -keystore "%BPPM_AGENT_HOME%\Agent\jre\lib\security\cacerts" -storepass changeit
    • Local IS: <installation_directory>/TrueSight/pw/jre/lib/security/cacerts
      Examples
      Unix: keytool -importcert -alias truesightserver -file /tmp/truesight.cer -keystore "$BPPM_SERVER_HOME/pw/jre/lib/security/cacerts" -storepass changeit
      Windows: keytool.exe -importcert -alias truesightserver -file C:\temp\truesight.cer -keystore "%BPPM_SERVER_HOME%\pw\jre\lib\security\cacerts" -storepass changeit

  7. For Unix, perform the following steps to restart the Integration Service:
    1. Open the Command Prompt.
    2. Navigate to one of the following directories:
      Remote IS: $BPPM_AGENT_HOME/Agent/pronto/bin
      Local IS: $BPPM_SERVER_HOME/pw/pronto/bin
    3. Execute the following commands to restart the Integration Service
      ./pw is stop
      ./pw is start
  8. For Windows, restart the Integration Service [ProNetAgent] by using Windows Services.

Deploying packages to PATROL Agents running on IBM AIX fails

When you deploy a package to a PATROL Agent running on IBM AIX, it fails. The RunSilentInstall log file contains the following error:

ERROR: PatrolAgent Cannot bind to RT Server -  tcp:localhost:2059 smux bind failure: Address already in use
/opt/bmc/PatrolAgent/Patrol3//AIX7.1-64/bin/snmpmagt: error processing configuration The installation completed successfully.

Solution

  1. Before deploying the package, stop the SNMP daemon by running the following command:
    stopsrc -s snmpd
  2. Deploy the package.
  3. Start the SNMP daemon by running the following command:
    startsrc -s snmpd

Deploying packages to PATROL Agents fails due to incorrect host name reference

In certain environments, deploying packages to PATROL Agents might fail due to an incorrect Presentation Server host name reference.

Use the Presentation Server external alias instead. Ensure that this host name is accessible from the Integration Service.

  1. Run the following command from the <Presentation Server installation directory>\truesightpserver\bin folder:
    tssh properties set CHUNK_URL_HOSTNAME <external_alias>
  2. Run the following command to apply the updated setting:
    tssh properties reload 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*