Symantec VIP RADIUS Validation Server not starting up. Error: could not connect to health check service

Products

• VIP Service

Issue/Introduction

After upgrading, rolling back, or importing settings to another VIP EG server with the same conditions the RADIUS Validation Service starts up, but after less than a minute, the service stops. 

Cause

The Radius Validation Server can not connect to the Health Check service. 

The following error in the RADIUS Validation Server log

INFO "2023-03-23 14:45:43.429 GMT-0600"  0.0.0.0 ACS:1813 0 0 "text=Checking the health check service." Thread-4276 MonitorThread.cpp
DEBUG "2023-03-23 14:45:43.429 GMT-0600"  0.0.0.0 ACS:1813 0 0 "text=Health check service status check URL: " Thread-4276 MonitorThread.cpp
ERROR "2023-03-23 14:45:43.429 GMT-0600"  0.0.0.0 ACS:1813 0 0 "text=Error doing connect. Could not connect to health check service: URL using bad/illegal format or missing URL. Check whether the service is running or not." Thread-4276 MonitorThread.cpp

This indicates that the Radius server was not able to connect with the Health Check service.

Resolution

After importing the settings or rolling back changes, make any small change in the Health Check service settings under the Settings > Health Check Settings tab, then save the changes. This resets the Health Check service and will allow the Health check service and Radius Validation server to start.

Note: If Identity Providers are configured, restart these services after the change. 

Additional Information

To reset the Health Check Service back to default:

• stop all VIP services
• navigate to the <install path>\Symantec\VIP_Enterprise_Gateway\conf
• rename the healthcheck.properties to healthcheck.properties_old
• rename healthCheckAlerts.log to healthCheckAlerts.log.old
• Enter the following command at a command prompt:
  sc delete healthcheckservice
• Start the VIP Enterprise Gateway Service.
• Renable the VIP Healthcheck Service to create a new instance.