03-08-2011 01:16 AM
Hi All,
I have a ciscoworks LMA 2.6. In this the DCA server is showing down, as per the online help I have stopped and restarted the DCRserver process
Server-->Admin-->Processes-->DCR Server
But its giving the status as "Wating to initialize"
I have added all the related snapshots, please help.
Regards,
Mohammed Saleemuddin
Solved! Go to Solution.
03-08-2011 06:38 AM
Iif your LMS is not used since long and usually in the case of LMS 2.6 the certificate expires and creates and issue with the services.
You may want to check if the certificates are valid or not, as i strongly think of it as a certificate being expired issue.
You can check the certificate from :
NMSROOT\MDC\Apache>perl SSLUtil.pl
It will give you many options as :
*** CiscoWorks SSL Utility ***
Note: Any Certificate given as input to this script should be in Base64-Encoded
X.509Certificate format
You have the following options
1. Display CiscoWorks Server Certificate Information
2. Display the input Certificate Information
3. Display Root CA Certificates trusted by CiscoWorks Server
4. Verify the input Certificate/ Certificate Chain
5. Upload Single Server Certificate to CiscoWorks Server
6. Upload a Certificate Chain to CiscoWorks Server
7. Modify Common Services Certificate
8. Quit
Enter your choice [1-8]:
Please check if certificate validity from option 1.
If expired use the following procedure to regenerate the SSL certificates :
Steps
-------------
net stop crmdmgtd (wait f or 10 m inutes)
delete all the server.* files in CSCOpx\MDC\Apache\conf\SSL( take the backup of them at desktop)
Then change the directory to: cd CSCOpx\MDC\Apache
and run:
CSCOpx\bin\perl ConfigSSL.pl -disable
CSCOpx\bin\perl configssl.pl -enable
and fill out the form. Please enter only the hostname of the server and not the FQDN.
CSCOpx\bin\perl ConfigSSL.pl -disable
net start crmdmgtd (wait 10 minutes)
This should be able to fix the issue.
03-09-2011 01:59 PM
HI,
Here is the error i was suspecting :-
ERROR: Certificate Date Invalid
java.security.cert.CertificateExpiredException: NotAfter: Fri Jun 11 17:20:09 AST 2010
The self sign certificate of ciscoworks got expired and therefore need to be re-geneat from CLI of Ciscoworks as follows :-
a.Stop Daemons
C:\net stop crmdmgtd
b. Remove server.* under CSCOpx\MDC\Apache\conf\ssl ( take a backup of these files before deleting)
c. Run the following commands:
CSCOpx\MDC\Apache\perl ConfigSSL.pl -disable
CSCOpx\MDC\Apache\bin\perl ConfigSSL.pl -enable (fill up the certificate info , kindly enter the hostname of the server and not the FQDN)
If you are not using SSL connectivity to CiscoWorks
CSCOpx\MDC\Apache\bin\perl ConfigSSL.pl -disable
d.Restart Daemons
c:\net start crmdmgtd (wait for atleast 20 minutes before logging back to CiscoWorks)
It should fix the issue, if not then kindly collect the new pdhsow output.
Thanks,
Gaganjeet
"If this post answers your question, please click the "Correct Answer" button"
03-08-2011 01:27 AM
Hi,
Kindly share the pdshow output and DCRServer and dcrclient.log from location :- CSCOpx\log
Also kindly share what is the platform of the CiscoWorks server - Windows\Solaris and for how long this server had been up and running.
Thanks,
Gaganjeet
03-08-2011 05:13 AM
Dear Gaganjeet,
Attached are the requested outputs. The DCRServer.log file size is 128Mb, thats why I cant upload it here, please let me know if you need any specific information from it.
We are using Windows Server 2003 enterprise edition, recently the server was restarted by the server team for some maintanance activity. We were not using Ciscoworks from past two years but now we need to use it, and when I tried it I face this issue.
Your help is highly appreciated.
03-08-2011 06:38 AM
Iif your LMS is not used since long and usually in the case of LMS 2.6 the certificate expires and creates and issue with the services.
You may want to check if the certificates are valid or not, as i strongly think of it as a certificate being expired issue.
You can check the certificate from :
NMSROOT\MDC\Apache>perl SSLUtil.pl
It will give you many options as :
*** CiscoWorks SSL Utility ***
Note: Any Certificate given as input to this script should be in Base64-Encoded
X.509Certificate format
You have the following options
1. Display CiscoWorks Server Certificate Information
2. Display the input Certificate Information
3. Display Root CA Certificates trusted by CiscoWorks Server
4. Verify the input Certificate/ Certificate Chain
5. Upload Single Server Certificate to CiscoWorks Server
6. Upload a Certificate Chain to CiscoWorks Server
7. Modify Common Services Certificate
8. Quit
Enter your choice [1-8]:
Please check if certificate validity from option 1.
If expired use the following procedure to regenerate the SSL certificates :
Steps
-------------
net stop crmdmgtd (wait f or 10 m inutes)
delete all the server.* files in CSCOpx\MDC\Apache\conf\SSL( take the backup of them at desktop)
Then change the directory to: cd CSCOpx\MDC\Apache
and run:
CSCOpx\bin\perl ConfigSSL.pl -disable
CSCOpx\bin\perl configssl.pl -enable
and fill out the form. Please enter only the hostname of the server and not the FQDN.
CSCOpx\bin\perl ConfigSSL.pl -disable
net start crmdmgtd (wait 10 minutes)
This should be able to fix the issue.
03-08-2011 11:09 PM
Dear,
I tried the steps given by you, but its of no use...
08-01-2012 07:02 AM
Great post! Got me out of trouble. Ciscoworks works fine now. Thanks a lot.
12-22-2016 11:21 AM
It got me back up and running, Thanks!!!!
03-08-2011 07:15 AM
Hi,
Thanks for sharing the pdshow and dcrclient.log. Kindly clear the contents the DCRServer.log and share it too.If possible share the syslog.log too.
Both the logs are at location :- CSCOpx\log.
Thanks
Gaganjeet
03-08-2011 10:20 PM
03-09-2011 01:59 PM
HI,
Here is the error i was suspecting :-
ERROR: Certificate Date Invalid
java.security.cert.CertificateExpiredException: NotAfter: Fri Jun 11 17:20:09 AST 2010
The self sign certificate of ciscoworks got expired and therefore need to be re-geneat from CLI of Ciscoworks as follows :-
a.Stop Daemons
C:\net stop crmdmgtd
b. Remove server.* under CSCOpx\MDC\Apache\conf\ssl ( take a backup of these files before deleting)
c. Run the following commands:
CSCOpx\MDC\Apache\perl ConfigSSL.pl -disable
CSCOpx\MDC\Apache\bin\perl ConfigSSL.pl -enable (fill up the certificate info , kindly enter the hostname of the server and not the FQDN)
If you are not using SSL connectivity to CiscoWorks
CSCOpx\MDC\Apache\bin\perl ConfigSSL.pl -disable
d.Restart Daemons
c:\net start crmdmgtd (wait for atleast 20 minutes before logging back to CiscoWorks)
It should fix the issue, if not then kindly collect the new pdhsow output.
Thanks,
Gaganjeet
"If this post answers your question, please click the "Correct Answer" button"
03-13-2011 06:31 AM
Dear Gaganjeet,
Thanks a lot, its working fine now. The way you explained to regenerate the certificate was very good.
Thanks
08-05-2013 03:59 PM
Many thanks to
The solution is still valid. It has just fixed my CiscoWorks server.
-Thanks
BD
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide