CA IDENTITY SUITE 14.x vApp rngd process consuming high CPU affecting Services
search cancel

CA IDENTITY SUITE 14.x vApp rngd process consuming high CPU affecting Services

book

Article ID: 139759

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Identity Suite

Issue/Introduction

IM , IG and/or IP Services are going down randomly in Virtual Appliance 14.2 Nodes

Reviewing log Files Shows appears :


Java HotSpot (TM) 64-Bit Server VM warning: Failed to reserve shared memory (errno = 1).

[0m07: 27: 27,266 INFO [org.jboss.modules] (main) JBoss Modules version 1.3.3.End
[0m [0m07: 27: 30,660 INFO [org.jboss.msc] (main) JBoss MSC version 1.2.2.End
[0m [0m07: 27: 30,987 INFO [org.jboss.as] (MSC service thread 1-7) JBAS015899: WildFly 8.2.0.Final "Tweek" starting
[0m [32m07: 27: 31,004 DEBUG [org.jboss.as.config] (MSC service thread 1-7) Configured system properties:
[Standalone] =
 
[WARN] Cannot check the heap size for Identity Governance - jstat command ("/opt/CA/jdk1.8.0_71/bin/jstat") returned error 1 for PID 6732
[WARN] Cannot check the heap size for Identity Manager - jstat command ("/opt/CA/jdk1.8.0_71/bin/jstat") returned error 1 for PID 94045
[WARN] Cannot check the heap size for Identity Portal - jstat command ("/opt/CA/jdk1.8.0_71/bin/jstat") returned error 1 for PID 15501

Customer Detected :    RNGD process running and consuming high CPU

 

Environment

Release : 14.2 and 14.3 prior to cp3

Component : CA IDENTITY SUITE (VIRTUAL APPLIANCE)

Cause

rngd process consuming high CPU

Resolution

1. RNGD service is disabled in Vapp 14.2 and 14.3 latest cumulative patches.

2.  The Random Number Generator (RNGD) service used for setting up the entropy on the Virtual Appliance. 

3. It has been observed that the RNGD service consumes excessive CPU thus impacting the other services on the Virtual Appliance. 

4. The RNGD service is now disabled and services like JCS are modified to run without the help of RNGD, using /dev/urandom.

Additional Information

Release Notes :


https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-manager/14-3/Release-Notes.html