Error : Unable to Load SiteMinder Host Configuration Object on Windows

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

 

Siteminder Agent will not load on Windows Server. This used to work
but broke 3 days ago. When checking paths and permissions, all seem to
be correct.

The following error is in the event viewer.

  Description:

  Unable to load SiteMinder host configuration object or host configuration file.

  <Install_Dir>\webagent\config\SmHost.conf

In the SMPS Server Log the following information messages are
generated.

  Bad security handshake attempt. Handshake error: 3154
  Handshake error: Shared secret incorrect for this client
  Failed handshake with ::<IP_ADDRESS>

NOTE: The IP address noted in the SMPS Log is the IP address of the
Siteminder Agent Web Server.

 

Environment

Web Agent Version: 12.52.x

 

Cause

 

The shared secret in the SmHost.conf file may not be accepted by the
Policy Server.

 

Resolution

 

Running smreghost to re-register the agent should resolve this issue.

  smreghost -i policy_server_IP_address:[port] -u administrator_username -p administrator_password -hn hostname_for_registration -hc host_configuration_object

Example: smreghost -i <IP_Address>:<Tcp_Port> -u <Siteminder_Admin> -p <admin_password> -hn <AgentName> -hc <Host_Configuration_Object>

Register a Trusted Host Using the smreghost Registration Tool