UIM inventory is missing DX Operational Intelligence (DOI)

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

DX Operational Intelligence (DOI) does not list any UIM devices. The apm_bridge starts up fine and does not report any alarms errors

apm_bridge.log captures the following errors:

apm_bridge] Could not retrieve hosting edges from TAS. profile id: 0, host: <apmservices-gateway.example> 
apm_bridge] Could not determine UIM or TAS devices to forward for profile 0 with origin ENMS_CORE,ENMS_ODN,ENMS_UDN. Exception: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
apm_bridge] javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Environment

Any apm_bridge probe version

Cause

This issue is seen when the apm services gateway host certificate has not been imported in the JRE cacerts keystore on the robot where the apm_bridge is installed.

Resolution

1. Obtain the <root> and <issuing certificate> certificates (.cer or .crt files) for the apm services gateway host shown in the log

2, Copy the certificate files to the robot where the apm_bridge is installed.

Example:

Windows: C:\Program Files (x86)\Nimsoft\jre\<version>\lib\security

Linux: /opt/nimsoft/jre/<version>/lib/security/

3. Import the certificates to cacerts keystore

Windows:

a. Run cmd as administrator

b.Change the directory to C:\Program Files (x86)\Nimsoft\jre\<version>\bin

c. Import the root certificate

keytool.exe -importcert -keystore cacerts -alias <myroot> -storepass changeit -file "C:\Program Files (x86)\Nimsoft\jre\<version>\lib\security\<root>" -trustcacerts

d. Import the issuing certificate

keytool.exe -importcert -keystore cacerts -alias <myissuing> -storepass changeit -file "C:\Program Files (x86)\Nimsoft\jre\<version>\lib\security\<issuing certificate>" -trustcacerts

Linux:

a. Open a putty session on the robot with the apm_bridge probe

b.  Import the root certificate

/opt/nimsoft/jre/<version>/bin/keytool -import -trustcacerts -alias <myroot> -file /opt/nimsoft/jre/<version>/lib/security/<root> -keystore /opt/nimsoft/jre/<version>/lib/security/cacerts

b.  Import the issuing certificate

/opt/nimsoft/jre/<version>/bin/keytool -import -trustcacerts -alias <myissuing> -file /opt/nimsoft/jre/<version>/lib/security/<issuing certificate> -keystore /opt/nimsoft/jre/<version>/lib/security/cacerts

4. Deactivate/Activate the apm_bridge probe