Error : Unable to load SiteMinder host configuration object on Windows

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On SOA Security Manager (SiteMinder)
• CA Single Sign-On
• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

 

Siteminder Agent will not load on Windows Server. This used to work
but broke 3 days ago. When checking paths and permissions, all seem to
be correct.

The following error is in the event viewer.

  Description:

  Unable to load SiteMinder host configuration object or host configuration file.

  C:\Program Files\netegrity\webagent\config\SmHost.conf

In the SMPS Server Log the following information messages are
generated.

  Bad security handshake attempt. Handshake error: 3154
  Handshake error: Shared secret incorrect for this client
  Failed handshake with ::ffff:192.168.2.123:3318 

NOTE: The IP address noted in the SMPS Log is the IP address of the
Siteminder Agent Web Server.

 

Environment

Web Agent Version: 12.52.x

 

Cause

 

The shared secret in the SmHost.conf file may not be accepted by the
Policy Server.

 

Resolution

 

Running smreghost to re-register the agent should resolve this issue.

  smreghost -i policy_server_IP_address:[port] -u administrator_username -p administrator_password -hn hostname_for_registration -hc host_configuration_object

Example: smreghost -1 192.168.2.100:4444 -u siteminder -p suPassword -hn AgentName -hc c:\path\to\smhost.conf

Register a Trusted Host Using the smreghost Registration Tool