CWP Controller fails to enroll with CAF agent, "Unknown error 336134278"

Products

• Cloud Workload Protection for Storage

Issue/Introduction

After installing a new Cloud Workforce Protection (CWP) for Storage Controller on Amazon Web Service (AWS) using Cloudformation template, CAF agent fails to enroll the controller into CWP portal.

Relevant cafagent logs:

2021-12-06 16:37:56 | cafservice.CAFEnrollManager | Error | 3527 : 140275678590720 : operator():111 | Enrollment with server failed.
2021-12-06 16:37:56 | cafservice.CAFEnrollManager | Error | 3527 : 140275678590720 : operator():112 | The error code is:20
2021-12-06 16:37:56 | cafservice.CAFEnrollManager | Error | 3527 : 140275678590720 : operator():113 | Error message: HttpTransportNetworkError
2021-12-06 16:37:56 | cafservice.CAFEnrollManager | Error | 3527 : 140275678590720 : operator():114 | Error details: {"0":{"0":"ProxyModeDefault (8)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}},"1":{"0":"ProxyModeDefault (8)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}},"2":{"0":"ProxyModeDefault (8)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}},"3":{"0":"ProxyModeDefault (8)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}},"4":{"0":"ProxyModeDefault (8)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}},"5":{"0":"ProxyModeDisabled (16)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}},"6":{"0":"ProxyModeAutoDetect (2)","1":"EpmpClientErrorCodes: HttpTransportNetworkError (20)","2":{"0":"generic","1":336134278,"2":"Unknown error 336134278"}}}
2021-12-06 16:37:56 | cafservice.CAFEnrollManager | Error | 3527 : 140275678590720 : operator():140 | HTTP Transport error caused by some network problem, error message:HttpTransportNetworkError
2021-12-06 16:37:56 | cafservice.CAFEnrollManager | Information | 3527 : 140275678590720 : operator():203 | Will retry for enrollment in next 30 minutes.

 

Environment

Release : 15.5

 

Cause

Cafconfig.ini contains SSL config lines similar to the following, but CWP console discontinued use of certificate pinning. 

[ssl-config]
Https_CertFilePath=certs

Resolution

Please upgrade CWP for Storage to the latest version. Please download the CloudFormation Template (CFT) from the CWP console to upgrade.

For more information, see the following online help topic: 

https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/cloud-workload-protection-for-storage/1-0/AWS_Storage_Configurations_3/updating-the-aws-stack-v125504989-d4995e58902.html