Resetting the system fingerprint of lockbox after installation
search cancel

Resetting the system fingerprint of lockbox after installation

book

Article ID: 345307

calendar_today

Updated On:

Products

VMware Smart Assurance

Issue/Introduction

Post installation of NCM on a new system, the $VOYENCE_HOME/ncmcore/logs/catalina.out log file in Application Server displays the following error: 

The lockbox stable value threshold was not met because the system fingerprint has changed. To reset the system fingerprint, open the lockbox using the passphrase. : File : /opt/voyence/lockbox/xml/csp.clb.


As such, need to reset the system fingerprint.

Environment

NCM 10.1.X

Resolution

To resolve this situation, execute the following steps on AS:

  • Navigate to $VOYENCE_HOME/bin directory as follows:     
cd $VOYENCE_HOME/bin
  • Type the following commands to unlock the lockbox:   
source /etc/voyence.conf  
$VOYENCE_HOME/bin/cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase>
  • Restart vcmaster with following command:      
service vcmaster restart for NCM 10.1.6 and below
systemctl restart vcmaster for NCM 10.1.8 and above.
  • On distributed setup:
    • If you choose Standard Security mode during AS installation, copy lockb.ekey from $VOYENCE_HOME/data in the AS to $VOYENCE_HOME/data on the remote server (DS, RA, or Database).
    • Restart vcmaster on remote servers.
  • If you chose Advanced Security mode during AS installation, make sure lockbox on AS has DS, RA details (server name, IP address) added/present. Steps to follow as below:
    • On the AS, navigate to $VOYENCE_HOME\bin directory. 
cd $VOYENCE_HOME/bin
  •  Add distributed system hosts to the lockbox using the cstdriver utility if not added already, as follows:
source /etc/voyence.conf
./cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase> -addHost <FQDN of Report Advisor server>
./cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase> -addHost <IP address of Report Advisor server>
./cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase> -addHost <FQDN of Device server>
./cstdriver -lockbox $VOYENCE_HOME/data/lockb.clb -passphrase <passphrase> -addHost <IP address of Device server>
  • Go to $VOYENCE_HOME\data directory.
  • Copy the lockb.clb file to $VOYENCE_HOME\data on each of the distributed system hosts (DS, RA).
  • Restart vcmaster on each of distributed system hosts with
service vcmaster restart for NCM 10.1.6 and below
systemctl restart vcmaster for NCM 10.1.8 and above.

 

Powered by Wolken Software