ISE Application will not start

[Razixs]

Hello All,

I am getting the following error when I try to restart the ISE application.

admin# application start ise safe

ISE Database processes already running, PID: 3749

ISE M&T Session Database is already running, PID: 6382

ISE Profiler Database is already running, PID: 6480

Starting ISE Application Server...

Starting ISE Monitoring & Troubleshooting Log Processor...

ISE M&T Log Collector is already running, PID: 8136

Starting ISE Indexing Engine...

Exception in thread "main" ElasticsearchException[Unable to load SSL properties]; nested: FileNotFoundException[/opt/CSCOcpm/elasticsearch/config/sslplugin.properties (No such file or directory)];

Likely root cause: java.io.FileNotFoundException: /opt/CSCOcpm/elasticsearch/config/sslplugin.properties (No such file or directory)

        at java.io.FileInputStream.open0(Native Method)

        at java.io.FileInputStream.open(FileInputStream.java:195)

        at java.io.FileInputStream.<init>(FileInputStream.java:138)

        at java.io.FileInputStream.<init>(FileInputStream.java:93)

        at org.elasticsearch.plugin.ssl.SSLPlugin.loadProperties(SSLPlugin.java:154)

        at org.elasticsearch.plugin.ssl.SSLPlugin.additionalSettings(SSLPlugin.java:110)

        at org.elasticsearch.plugins.PluginsService.updatedSettings(PluginsService.java:212)

        at org.elasticsearch.node.Node.<init>(Node.java:145)

        at org.elasticsearch.node.NodeBuilder.build(NodeBuilder.java:145)

        at org.elasticsearch.bootstrap.Bootstrap.setup(Bootstrap.java:170)

        at org.elasticsearch.bootstrap.Bootstrap.init(Bootstrap.java:270)

        at org.elasticsearch.bootstrap.Elasticsearch.main(Elasticsearch.java:35)

Refer to the log for complete error details.

ISE Indexing Engine did not start

docker daemon is already running, PID: 9961

WifiSetup is disabled.....

ISE AD Connector is already running, PID: 10412

Note: ISE Processes are initializing. Use 'show application status ise'

      CLI to verify all processes are in running state.

Any suggestion would be most appreciated. 

[hslai]

admin# application start ise safe

Any particular reason to start ISE in safe mode? To bypass IP ACL or certificate auth at ISE admin web portal?

You might be hitting CSCvf26936. Please try restart ISE services again. If that does not help, then please engage Cisco TAC.

[Razixs]

We tried to restart it both safe mode and normal.  Same error takes place.

[thomas]

Call TAC.

[hslai]

Yes, he has been working with Cisco TAC and our ESC teams.

For future reference, the real issue was the main ISE app server not coming up and FileNotFoundException[/opt/CSCOcpm/elasticsearch/config/sslplugin.properties (No such file or directory)] actually a side effect.

[csavas]

Hello,

I am facing exactly the same issue on my ISE 2.3 P2, distribute deployment.

On PAN: Application Server and ISE Indexing Engine is not running.

Starting with SAFE option did not fixed the problem, but gave me the same output.

Is there a workaround or solution?

Maybe a case id?

Thanks in advance,

Cengiz

[hslai]

Cengiz:-

If App server is not running as in Michael's case, then we need look at the logs on the main tomcat server -- appserver/catalina.out and ise-psc.log. Additionally, the system log file ade/ADE.log would help us better determining the cause. Michael's was due to an encryption issue so it's unlikely the same as yours.

If you engage Cisco TAC, please get a full support bundle to TAC and, if possible, a copy of the CFG backup.

Regards.

[Razixs]

This ended up being a problem with the Apache Tomcat.  The TAC folks had to change a couple of files in order to get it back online.  The case should be SR 684700391.  Hopefully, this helps.

Michael