Ciscoworks LMS 2.6 DCA server is not responding

[engineer_msu]

Hi All,

I have  a ciscoworks LMA 2.6. In this the DCA server is showing down, as per the online help I have stopped and restarted the DCRserver process

Server-->Admin-->Processes-->DCR Server

But its giving the status as "Wating to initialize"

I have added all the related snapshots, please help.

Regards,

Mohammed Saleemuddin

[Gaganjeet Chug]

Hi,

Kindly share the pdshow output and DCRServer and dcrclient.log from location :- CSCOpx\log

Also kindly share what is the platform of the CiscoWorks server - Windows\Solaris and for how long this server had been up and running.

Thanks,

Gaganjeet

[engineer_msu]

Dear Gaganjeet,

Attached are the requested outputs. The DCRServer.log file size is 128Mb, thats why I cant upload it here, please let me know if you need any specific information from it.

We are using Windows Server 2003 enterprise edition, recently the server was restarted by the server team for some maintanance activity. We were not using Ciscoworks from past two years but now we need to use it, and when I tried it I face this issue.

Your help is highly appreciated.

[Vinod Arya · Accepted solution]

Iif your LMS is not used since long and usually in the case of LMS 2.6 the certificate expires and creates and issue with the services.

You may want to check if the certificates are valid or not, as i strongly think of it as a certificate being expired issue.

You can check the certificate from :

NMSROOT\MDC\Apache>perl SSLUtil.pl

It will give you many options as :

                *** CiscoWorks SSL Utility ***

Note: Any Certificate given as input to this script should be in Base64-Encoded

X.509Certificate format

You have the following options

1. Display CiscoWorks Server Certificate Information

2. Display the input Certificate Information

3. Display Root CA Certificates trusted by CiscoWorks Server

4. Verify the input Certificate/ Certificate Chain

5. Upload Single Server Certificate to CiscoWorks Server

6. Upload a Certificate Chain to CiscoWorks Server

7. Modify Common Services Certificate

8. Quit

Enter your choice [1-8]:

Please check if certificate validity from option 1.

If expired use the following procedure to regenerate the SSL certificates :

Steps

-------------

net stop crmdmgtd  (wait f

or 10 m
inutes)

delete all the server.* files in CSCOpx\MDC\Apache\conf\SSL( take the backup of them at desktop)
Then change the directory to: cd CSCOpx\MDC\Apache

and run:

CSCOpx\bin\perl ConfigSSL.pl -disable

CSCOpx\bin\perl configssl.pl -enable

and fill out the form. Please enter only the hostname of the server and not the FQDN.

CSCOpx\bin\perl ConfigSSL.pl -disable

net start crmdmgtd (wait 10 minutes)
This should be able to fix the issue.

[engineer_msu]

Dear,

I tried the steps given by you, but its of no use...

[ssarsar08]

Great post! Got me out of trouble. Ciscoworks works fine now. Thanks a lot.

[dagyb]

It got me back up and running, Thanks!!!!

[Gaganjeet Chug]

Hi,

Thanks for sharing the pdshow and dcrclient.log.  Kindly clear the contents the DCRServer.log and share it too.If  possible share the syslog.log too.

Both the logs are at location :- CSCOpx\log.

Thanks

Gaganjeet

[engineer_msu]

Dear GaganJeet,

Please check the requested files attached.

[Gaganjeet Chug · Accepted solution]

HI,

Here is the error i was suspecting :-

ERROR: Certificate Date Invalid
java.security.cert.CertificateExpiredException: NotAfter: Fri Jun 11 17:20:09 AST 2010

The self sign certificate of ciscoworks got expired and therefore need to be re-geneat from CLI of Ciscoworks as follows :-

a.Stop Daemons
C:\net stop crmdmgtd

b. Remove server.* under CSCOpx\MDC\Apache\conf\ssl  ( take a backup of these files before deleting)

c. Run the following commands:
CSCOpx\MDC\Apache\perl ConfigSSL.pl -disable

CSCOpx\MDC\Apache\bin\perl ConfigSSL.pl -enable (fill up the certificate info , kindly enter the hostname of the server and not the FQDN)

If you are not using SSL connectivity to CiscoWorks
CSCOpx\MDC\Apache\bin\perl ConfigSSL.pl -disable

d.Restart Daemons
c:\net start crmdmgtd  (wait for atleast 20 minutes before logging back to CiscoWorks)

It should fix the issue, if not then kindly collect the new pdhsow output.

Thanks,
Gaganjeet

"If this post answers your question, please click the "Correct Answer" button"

[engineer_msu]

Dear Gaganjeet,

Thanks a lot, its working fine now. The way you explained to regenerate the certificate was very good.

Thanks

[binhkdinh]

Many thanks to

Gaganjeet Chugh

The solution is still valid. It has just fixed my CiscoWorks server.

-Thanks

BD