How to Remove the Old Orphaned Strong/Risk Authentication Instances from the AA Admin Console?
search cancel

How to Remove the Old Orphaned Strong/Risk Authentication Instances from the AA Admin Console?

book

Article ID: 209129

calendar_today

Updated On:

Products

CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort) CA Strong Authentication CA Risk Authentication

Issue/Introduction

Old, inactive or orphaned instances continue to appear in the AA (Advanced Authentication) Admin Console's  Instance Management screens. In addition the status data for newer instances is not displayed. This article provides the step-by-step database procedure to clean up the references to such instances from AA Admin's Instance Management screens..

Environment

 

  • Product Release: Version 9.1.5.x and above 

  • Components Affected: *

    • CA Strong Authentication  (a.k.a AuthMinder or Arcot WebFort)

    • CA Risk Authentication  (a.k.a RiskMinder or Arcot RiskFort)

  • Target Database Type: Oracle

  • ⚠️ Important Note: The standard queries below are specific to Oracle. If your environment uses MS SQL Server, the syntax for the INSERT statements will be slightly different. Do not run these scripts on MS SQL Server. If MS SQL server is targeted then please Convert these SQL statements to equivalent MS SQL queries then execute them for this clean up process 

 

 

Resolution

Before running any database queries, you must perform the following steps:

  1. Stop the application server.

  2. Stop all CA Strong Authentication server instances.

  3. Stop all CA Risk Authentication server instances.

  4. Note: If SSL is configured in your environment, it will need to be reconfigured for your protocols after completing this cleanup process.

Resolution Steps

Step 1: Strong Authentication Old Instance Cleanup

  1. Connect to your CA Strong Authentication database.

  2. Delete the old/inactive instances (replace <Host_Name> with the actual old/inactive hostname):

    SQL Query to execute
    DELETE FROM arwfinstances WHERE INSTANCENAME = '<Host_Name>';

    (Alternatively, One can clear all rows from arwfinstances table by executing the SQL query - DELETE FROM arwfinstances. Note that the entries for all the active CA Strong Authentication instances will automatically be recreated once the CA Strong Authentication service is restarted)

  3. Remove the protocol entries associated with that instance:

    SQL Query to execute
     
    DELETE FROM ARWFPROTOCOLCONFIGURATION WHERE INSTANCEID != 'DefaultInstance';
COMMIT;

Step 2: Risk Authentication Old Instance Cleanup

  1. Connect to your Risk Auth database.

    Delete the old CA Risk Authentication instances.

    SQL Query to execute
    DELETE FROM arrfinstances WHERE HOSTNAME = '<Host_Name>';

     

  2. Remove the protocol entries associated with that instance from arrfprotocolregistry table:

    SQL Query to execute
    DELETE FROM ARRFPROTOCOLREGISTRY WHERE INSTANCEID LIKE '<Host_Name>';

Step 3: Admin and UDS Instance Cleanup

  1. Connect to both your Strong Auth and Risk Auth databases.

  2. Clear the instance mapping infrastructure:

    SQL Query to execute
    DELETE FROM ARPFCMNINSTANCE;
COMMIT;

Step 4: Truncate and Re-populate the Admin Console Map (ARADMINMAP)

The ARADMINMAP table holds the layout configuration that dictates what displays on the Admin Console connectivity screens. Truncating this table resets the view, but requires any custom SSL settings to be reconfigured afterward.

  1. Truncate the ARAADMINMAP table:

    SQL Query to execute
    TRUNCATE TABLE ARADMINMAP;

  2. Execute the following queries to re-populate ARADMINMAP with default values:

    SQL Queries to execute
    -- Insert WebFort Admin Configs
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE)
VALUES (6, 'ARWF_ADMIN_CONFIGS', 'ARWF_ADMIN_CONFIGS', 'WebFort', null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

-- Insert WebFort Issuance Configs
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE)
VALUES (6, 'ARWF_ISSUANCE_CONFIGS', 'ARWF_ISSUANCE_CONFIGS', 'WebFort', null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

-- Insert WebFort Authentication Configs
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE)
VALUES (6, 'ARWF_AUTHENTICATION_CONFIGS', 'ARWF_AUTHENTICATION_CONFIGS', 'WebFort', null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

-- Insert WebFort Server Management Configs
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE)
VALUES (6, 'ARWF_SERVERMANAGEMENT_CONFIGS', 'ARWF_SERVERMANAGEMENT_CONFIGS', 'WebFort', null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

-- Insert WebFort Primary Server Management URL
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE)
VALUES (0, 'ARWF_PRIMARY_SERVERMANAGEMENT', 'ARWF_PRIMARY_SERVERMANAGEMENT', 'WebFort', 'http://localhost:9743');

-- Insert RiskFort Connectivity Configuration
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE) 
VALUES (6, 'ARRF_ADMIN_CONFIGS', 'ARRF_ADMIN_CONFIGS', 'RiskFort', null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

-- Insert RiskFort Case Management Configuration
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE) 
VALUES (6, 'ARRF_CASEMGMT_CONFIGS', 'ARRF_CASEMGMT_CONFIGS', 'RiskFort', null, '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');

-- Insert RiskFort Server Management Configuration
INSERT INTO ARADMINMAP (DATATYPE, DESCRIPTION, KEY, KEYSCOPE, VALUE, BLOBVALUE) 
VALUES (6, 'ARRF_SERVERMANAGEMENT_CONFIGS', 'ARRF_SERVERMANAGEMENT_CONFIGS', 'RiskFort', null, '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');

COMMIT;

Step 5: Post-Cleanup Execution Order

Once all database changes have been successfully committed, bring the services back online in this exact order:

  1. Start the Strong Authentication service.

  2. Start the Risk Authentication service.

  3. Start your application server.

Final Verification

  1. Log into the Admin Console using an account with Master Admin privileges.

  2. Navigate to the Strong Auth Connectivity Screen and the Risk Auth Connectivity Screen.

  3. Validate or update any configuration entries as needed. All old or orphaned references should now be completely gone, displaying only your actual environment instances.

Powered by Wolken Software