IDSM2 sig update through IDS MC 2.0

[paolob]

Hello,

forgive me if i will stress again about signatures update through VMS IDS version 2.0.

Since i installed it, i'm experiencing a well known problem related to the following error message:

Sensor ids-mo-dis-2: Signature Update Process

An error occurred while running the update script on the sensor named ids-mo-dis-2. Detail = An error occurred at the sensor during the update, sensor message = The host is not trusted. Add the host to the system's trusted TLS certificates.

Follwing the tips from previous post, i tried to switch between Common Services and CiscoWorks certificates; that trick worked for one sensor but not for the other one (it's a couple of IDSM2 4.1, with the very same configuration).

Any idea??

Paolo

[paolob]

One more clue about my issue.

I logged into sensor with service account, and I found that file /usr/cids/idsRoot/etc/tls.conf missed of the

following entry field:

[CA/foo.mynet.net]

certFile=foo.mynet.net.cer

foo.mynet.net is just the hostname of IDS MC console server. After i added it, the upgrade start to work properly. But after i issue the command:

/etc/init.d/cids restart

the file tls.conf still lacks of the previously added missing entry.