Symantec Identity Manager - Remote VAPP JCS/CCS Connector Servers fails to start after applying patch/upgrade

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

After applying patch or upgrade the remote Java Connector Server/C++ Connector server (JCS/CCS) does not start up properly.

im_ccs.log:
[06:52:49.635:00000DE8] loaded module eTrustAdminServer.dll
[06:52:49.635:00000DE8] module eTrustAdminServer.dll: null module registered
[06:52:49.635:00000DE8] line 112 (database          etrustadmin)
[06:52:49.635:00000DE8] database etrustadmin initialization failed.
[06:52:49.651:00000DE8] slapd stopped.
[06:52:49.651:00000DE8] connections_destroy: nothing to destroy.

Environment

14.4 CP1 and up and 14.5 SP1 and up both standalone and Virtual Appliance

Cause

Improper application of patch / upgrade.

Resolution

This can happen when the ETPKI CP or SP is not applied or applied incorrectly, follow the below guide to update it on the remote connector servers:

For 14.5 SP1

NOTE: Make sure to have backup and reconfigure any custom files / folders (if any) accordingly before applying "CONN-XP-1451-Instructions_On_How_To_Deploy".

1) etpki --> setup.exe and readme.txt
2) Readme.txt --> This has the URL for the "14.5.1” page.
*************************************
Deployment instructions:
*************************************
1) Extract the "ETPKI-1451.tar.gz" --> which has "setup.exe" and "readme.txt"
2) On extraction, navigate to etpki and from the command prompt run the below command:

    setup.exe install caller=IMPSSERVER verbose

3) Navigate to "C:\Program Files(x86)\CA\SharedComponents\ETPKI\CAPKI\CAPKI5\Windows\x86\32\lib\" --- check the version of the files, which should be 5.2.14.

NOTE: etpki should be installed / upgraded on Remote CCS host.
Please follow the above instructions to install / upgrade etpki to 5.2.14 on Remote ccs.

NOTE: etpki should be installed / upgraded on remote Identity Manager Provisioning Manager (IMPM) host.
Run the command:

    setup.exe install caller=IMPSMANAGER verbose

 

For 14.4 CP1 (currently unsupported version)

Windows Guide:
 libcaopenssl_crypto.dll 
 libcaopenssl_ssl.dll 
 libcapki.dll 
 libcapki_ipthread.dll 
 libcapki_thread.dll 
 
1) Take backup of "libcaopenssl_crypto.dll", "libcaopenssl_ssl.dll", "libcapki.dll", "libcapki_ipthread.dll", and "libcapki_thread.dll" folder from "\SharedComponents Installed 
Location\ETPKI\CAPKI\CAPKI5\Windows\x86\32\lib" (Default location: C:\Program Files (x86)\CA\SharedComponents\ETPKI)
2) Copy the provided "libcaopenssl_crypto.dll", "libcaopenssl_ssl.dll", "libcapki.dll", "libcapki_ipthread.dll", and "libcapki_thread.dll" folder to "\SharedComponents Installed 
Location\ETPKI\CAPKI\CAPKI5\Windows\x86\32\lib" 

Linux Guide:
 libcaopenssl_crypto.so 
 libcaopenssl_ssl.so 
 libcapki.so 
 libcapki_thread_posix.so 
 
1) Take backup of "libcaopenssl_crypto.so", "libcaopenssl_ssl.so", "libcapki.so" and "libcapki_thread_posix.so" from "Connector Server Installed  Location/CAPKI5/Linux/x86/32/lib" (Default location: opt\CA\SharedComponents\ETPKI)
2) Copy the provided "libcaopenssl_crypto.so", "libcaopenssl_ssl.so", "libcapki.so" and "libcapki_thread_posix.so" to "Connector Server Installed Location/CAPKI5/Linux/x86/32/lib"