topic Re: ISE Application will not start in Network Access Control

ISE Application will not start

Razixs — Sun, 24 Jun 2018 03:45:56 GMT

Hello All,

I am getting the following error when I try to restart the ISE application.

admin# application start ise safe

ISE Database processes already running, PID: 3749

ISE M&T Session Database is already running, PID: 6382

ISE Profiler Database is already running, PID: 6480

Starting ISE Application Server...

Starting ISE Monitoring & Troubleshooting Log Processor...

ISE M&T Log Collector is already running, PID: 8136

Starting ISE Indexing Engine...

Exception in thread "main" ElasticsearchException[Unable to load SSL properties]; nested: FileNotFoundException[/opt/CSCOcpm/elasticsearch/config/sslplugin.properties (No such file or directory)];

Likely root cause: java.io.FileNotFoundException: /opt/CSCOcpm/elasticsearch/config/sslplugin.properties (No such file or directory)

at java.io.FileInputStream.open0(Native Method)

at java.io.FileInputStream.open(FileInputStream.java:195)

at java.io.FileInputStream.<init>(FileInputStream.java:138)

at java.io.FileInputStream.<init>(FileInputStream.java:93)

at org.elasticsearch.plugin.ssl.SSLPlugin.loadProperties(SSLPlugin.java:154)

at org.elasticsearch.plugin.ssl.SSLPlugin.additionalSettings(SSLPlugin.java:110)

at org.elasticsearch.plugins.PluginsService.updatedSettings(PluginsService.java:212)

at org.elasticsearch.node.Node.<init>(Node.java:145)

at org.elasticsearch.node.NodeBuilder.build(NodeBuilder.java:145)

at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:170)

at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:270)

at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:35)

Refer to the log for complete error details.

ISE Indexing Engine did not start

docker daemon is already running, PID: 9961

WifiSetup is disabled.....

ISE AD Connector is already running, PID: 10412

Note: ISE Processes are initializing. Use 'show application status ise'

CLI to verify all processes are in running state.

Any suggestion would be most appreciated.

Re: ISE Application will not start

hslai — Sun, 24 Jun 2018 06:16:52 GMT

admin# application start ise safe

Any particular reason to start ISE in safe mode? To bypass IP ACL or certificate auth at ISE admin web portal?

You might be hitting CSCvf26936. Please try restart ISE services again. If that does not help, then please engage Cisco TAC.

Re: ISE Application will not start

Razixs — Sun, 24 Jun 2018 06:21:20 GMT

We tried to restart it both safe mode and normal. Same error takes place.

Re: ISE Application will not start

thomas — Mon, 25 Jun 2018 15:30:22 GMT

Call TAC.

Re: ISE Application will not start

hslai — Mon, 25 Jun 2018 15:42:00 GMT

Yes, he has been working with Cisco TAC and our ESC teams.

For future reference, the real issue was the main ISE app server not coming up and FileNotFoundException[/opt/CSCOcpm/elasticsearch/config/sslplugin.properties (No such file or directory)] actually a side effect.

Re: ISE Application will not start

csavas — Mon, 02 Jul 2018 13:24:04 GMT

Hello,

I am facing exactly the same issue on my ISE 2.3 P2, distribute deployment.

On PAN: Application Server and ISE Indexing Engine is not running.

Starting with SAFE option did not fixed the problem, but gave me the same output.

Is there a workaround or solution?

Maybe a case id?

Thanks in advance,

Cengiz

Re: ISE Application will not start

hslai — Mon, 02 Jul 2018 14:51:00 GMT

Cengiz:-

If App server is not running as in Michael's case, then we need look at the logs on the main tomcat server -- appserver/catalina.out and ise-psc.log. Additionally, the system log file ade/ADE.log would help us better determining the cause. Michael's was due to an encryption issue so it's unlikely the same as yours.

If you engage Cisco TAC, please get a full support bundle to TAC and, if possible, a copy of the CFG backup.

Regards.

Re: ISE Application will not start

Razixs — Mon, 02 Jul 2018 14:59:31 GMT

This ended up being a problem with the Apache Tomcat. The TAC folks had to change a couple of files in order to get it back online. The case should be SR 684700391. Hopefully, this helps.

Michael