vmware smart assurance network configuration manager ... · preface 1 as part of an effort to...

VMware Smart Assurance Network Configuration Manager Troubleshooting Guide

VMware Smart Assurance 10.1.0

You can find the most up-to-date technical documentation on the VMware website at:

https://docs.vmware.com/

VMware, Inc.3401 Hillview Ave.Palo Alto, CA 94304www.vmware.com

Copyright ©

2020 VMware, Inc. All rights reserved. Copyright and trademark information.


VMware, Inc. 2


http://pubs.vmware.com/copyright-trademark.html

Contents

1 Preface 4Revision history 4

Purpose 4

Audience 5

Related documentation 5

Conventions used in this document 5

Typographical conventions 6

Where to get help 6

Your comments 7

2 Introduction 8What is Network Configuration Manager? 8

About this Manual 8

Using the saveLogs.pl diagnostic script 8

3 Installation error messages and solutions 10Installation Errors on Red Hat Enterprise Linux 10

Manually uninstalling Network Configuration Manager 13

Installation Errors on Windows Server 13

Errors in the install logs 16

Error 16

Error (for Windows) 16

4 General error messages and solutions 18General Network Configuration Manager errors 18

5 Common Installation Questions and Answers 20

6 Common RSA Token Service Questions and Answers 22

VMware, Inc. 3

Preface 1As part of an effort to improve its product lines, VMware periodically releases revisions of its software and hardware. Therefore, some functions described in this document might not be supported by all versions of the software or hardware currently in use. The product release notes provide the most up-to-date information on product features.

Contact your VMware technical support professional if a product does not function properly or does not function as described in this document.

Note This document was accurate at publication time. Go to VMware Online Support docs.vmware.com to ensure that you are using the latest version of this document.

This chapter includes the following topics:

n Revision history

n Purpose

n Audience

n Related documentation

n Conventions used in this document

n Where to get help

n Your comments

Revision history

Date Revision Description

May, 2019 01 GA release

Purpose

This document describes the troubleshooting information for VMware Smart Assurance Network Configuration Manager Version 9.2.

VMware, Inc. 4


Audience

This document is part of the VMware Smart Assurance Network Configuration Manager documentation set, and is intended for use by those individuals who have the responsibility of installing and deploying Network Configuration Manager.

Related documentation

The following VMware publications provide additional information:

n VMware Smart Assurance Network Configuration Manager Release Notes

n VMware Smart Assurance Network Configuration Manager Installation Guide

n VMware Smart Assurance Network Configuration Manager EMC Data Access API (EDAA) Programmer Guide

n VMware Smart Assurance Network Configuration Manager Applicaton Program Interface (API) Javadoc Reference Guide

n VMware Smart Assurance Network Configuration Manager Device Access Scripting Language (DASL) Specifications Guide

n VMware Smart Assurance Network Configuration Manager Documentation Portfolio

n VMware Smart Assurance Open Source License and Copyright Information

n VMware Smart Assurance Network Configuration Manager Online User Guide

n VMware Smart Assurance Network Configuration Manager System Management Console Guide

n VMware Smart Assurance Network Configuration Manager Attributed Model User Guide

n VMware Smart Assurance Network Configuration Manager Security Configuration Guide

n VMware Smart Assurance Network Configuration Manager User Guide

n VMware Smart Assurance Network Configuration Manager Troubleshooting Guide

n VMware Smart Assurance Network Configuration Manager Device Driver Toolkit Technical Notes

Conventions used in this document

VMware uses the following conventions for special notices:

Note NOTICE is used to address practices not related to personal injury.

A note presents information that is important, but not hazard-related.

An important notice contains information essential to software or hardware operation.


VMware, Inc. 5

Typographical conventions

VMware uses the following type style conventions in this document:

Bold Use for names of interface elements, such as names of windows, dialog boxes, buttons, fields, tab names, key names, and menu paths (what the user specifically selects or clicks)

Italic Use for full titles of publications referenced in text

MonospaceUse for:

n System output, such as an error message or script

n System code

n Pathnames, filenames, prompts, and syntax

n Commands and options

Monospace italic

Use for variables.

Monospace bold

Use for user input.

[ ] Square brackets enclose optional values

| Vertical bar indicates alternate selections — the bar means “or”

{ } Braces enclose content that the user must specify, such as x or y or z

... Ellipses indicate nonessential information omitted from the example

Where to get help

VMware support, product, and licensing information can be obtained as follows:

Product information

For documentation, release notes, software updates, or information about VMware products, go to VMware Online Support at:

support.vmware.com

docs.vmware.com

Technical support

Go to VMware Online Support. You will see several options for contacting VMware Technical Support. Note that to open a service request, you must have a valid support agreement. Contact your VMware sales representative for details about obtaining a valid support agreement or with questions about your account.


VMware, Inc. 6

https://www.vmware.com/support.html


Your comments

Your suggestions will help us continue to improve the accuracy, organization, and overall quality of the user publications. Provide your opinions of this document to:

docs.vmware.com


VMware, Inc. 7


Introduction 2This chapter includes the following topics:

n What is Network Configuration Manager?

n About this Manual

n Using the saveLogs.pl diagnostic script

What is Network Configuration Manager?

n Network Configuration Manager is a network configuration management tool that gives you the power to quickly, easily, and accurately design, modify, and maintain networks, using an intuitive graphical network view.

n Network Configuration Manager automates complex and routine engineering tasks, such as adding devices and connections, with drag-and-drop simplicity.

n Via real-time auto discovery of network devices and logical and physical topology information, Network Configuration Manager provides a proactive configuration management approach.

About this Manual

This manual provides the following information and procedures necessary to troubleshoot the installation of Network Configuration Manager 9.6.1, including:

n Installing Network Configuration Manager

Using the saveLogs.pl diagnostic script

You can use the saveLogs.pl script to aid in troubleshooting. The script is located in the [Product Directory]/tools directory and is run from a bash or command prompt.

The script creates zip files containing logs for later evaluation. The zip files are saved in the [Product Directory]/logs directory. Along with logs, system information from the results from the environment.pl script are written to [Product Directory]/logs/environment.log. This information is saved in the zip file. The voyence.conf file and the host files are also included in the zip file.

VMware, Inc. 8

Since the log files can be very large, there are options for selecting a subset of logs as well as searching logs by Date and/or Time and a search string. The date and search string are not case sensitive.

saveLogs.pl script options lists the options available with the saveLogs.pl script.

Table 2-1. saveLogs.pl script options

Option Description

./saveLogs.pl CS Create a zip file containing all current Combo Server logs.

./saveLogs.pl DS Create a zip file containing all current Device Server logs.

./saveLogs.pl AP Create a zip file containing all current App Server logs.

./saveLogs.pl all Create a zip file containing all current logs.

./saveLogs.pl logs Create a zip file containing logs from <Product Directory>/logs.

./saveLogs.pl tomcat Create a zip file containing tomcat logs.

./saveLogs.pl jboss Create a zip file containing jboss logs.

./saveLogs.pl database Create a zip file containing database logs.

./saveLogs.pl jstack Create a zip file containing java stack trace files.

Note This process could potentially take a long time.

./saveLogs.pl install Create a zip file containing install logs.

./saveLogs.pl search <string> Create a zip file containing logs with the string provided.

./saveLogs.pl date <MMM DD> <HH:MM> Create a zip file containing logs with the date provided (Time is optional).

./saveLogs.pl time <HH:MM> Create a zip file containing logs where time is HH:MM or HH:MM:SS.

./saveLogs.pl exception <# of leading lines> Create a zip file containing java exceptions from the logs.

./saveLogs.pl ds_cache Create a zip file containing the Device Server cache, if applicable.

./saveLogs.pl snapshot Create a zip file containing the snapshot information (produced from snapshot.pl).


VMware, Inc. 9

Installation error messages and solutions 3This chapter includes the following topics:

n Installation Errors on Red Hat Enterprise Linux

n Installation Errors on Windows Server

n Errors in the install logs

Installation Errors on Red Hat Enterprise Linux

The following error messages can appear when installing Network Configuration Manager using Red Hat Enterprise Linux.

Error Message Solution

When trying to restart Network Configuration Manager Services, the following error is displayed when Device Server Service is already running:

[FAILED]

To verify the Network Configuration Manager services that are running, and to manually stop them:

n Run ps afx on the server and search for the following processes:

autodiscd

cfgmgrd

commmgrd

evdispatchd

syssyncd

zebedee

n Note the Process ID, or pid, and stop the service (the pid can be found in the first column of the command output) using the command:

kill -9 pid

To stop multiple processes, you can append the processes to the command, for example:

kill -9 pid [pid...]

n To start and stop all the Network Configuration Manager services using the above commands, run:

/etc/init.d/vcmaster script

VMware, Inc. 10

This platform is not supported. The supported Linux platforms are: Red Hat Enterprise Linux 5.8 and above, and Red Hat Enterprise Linux 6.x

Verify the server operating system is officially supported by Network Configuration Manager.

/etc/redhat-release is required to validate the OS version. Verify the following:

n The /etc/redhat-release file exists

n The operating system you are installing on is officially supported by Network Configuration Manager

Could not find an installed version of Java compatible with this product. See the Install Guide for details.

Verify the following:

n The installed version of Java is compatible with Network Configuration Manager

n Java is installed correctly

Could not find an installed version of OpenSSL compatible with this product. See the Install Guide for details.


n The installed version of OpenSSL is compatible with Network Configuration Manager

n OpenSSL is installed correctly

Could not find an installed version of Apache HTTP Server. Verify the following:

n The installed version of Apache HTTP Server is compatible with Network Configuration Manager

n Apache HTTP Server is installed correctly

Could not find an installed version of Tomcat compatible with this product. See the Install Guide for details.


n The installed version of Apache Tomcat Server is compatible with Network Configuration Manager

n Apache Tomcat Server is installed correctly

<HOST> not found in /etc/hosts. Create an entry for this hostname.

The /etc/hosts file must contain an entry for the hostname of the server, as it's known to the operating system.

n Run the hostname command to print the hostname

n Verify that the /etc/hosts file has an entry for that hostname

<IP ADDRESS> not found in /etc/hosts. Create an entry for this IP address.

The /etc/hosts file must contain an entry for the IP address of the primary network interface.

/etc/hosts file is missing and is required. Create a /etc/hosts file that contains the following:

n An entry for localhost

n An entry for the hostname of the server

/etc/resolv.conf must contain a nameserver entry. Add a nameserver entry to the /etc/resolv.conf file that includes a valid DNS server IP address.

/etc/resolv.conf is required for domain name resolution. Create a /etc/resolv.conf file that contains at least one valid nameserver entry.

SELinux must be disabled. Complete the following:

n Edit the /etc/sysconfig/selinux file

n Set SELINUX=disabled

n Reboot the server

/usr/sbin/selinuxenabled is required to determine if SELinux is enabled.

Install the libselinux RPM, which includes the /usr/sbin/selinuxenabled utility.


VMware, Inc. 11

Could not determine Perl version from perl -v command. Verify the following:

n perl is in the system PATH

n perl -v returns the version information for Perl

Perl version <VERSION> does not match the required version <REQUIRED VERSION>.

Complete the following:

n Install the required version of Perl and

n Verify perl is in the system PATH

Perl version command (perl -v) returned an error. Verify the following:



<FILE or DIRECTORY> is not readable. Verify that the file or directory specified in the error is readable.

<FILE or DIRECTORY> is not writable. Verify that the file or directory specified in the error is writable.

<FILE or DIRECTORY> is not executable. Verify that the file or directory specified in the error is executable.

The <RPM> (<VERSION>) RPM is not installed and is required.

Install the RPM specified in the error.

Note When installing the RPM, ensure the RPM version matches the version specified in the error.

The <RPM> RPM is not installed and is required. Install the RPM specified in the error.

The <RPM> RPM is installed but the version does not match the required version (<VERSION>).

Install the required version of the package specified in the error.

No success connecting to <HOST> on port <PROTO> <PORT> (<SERVICE>) after 10 tries.

Check the install logs for errors. A required service may have failed to start.

Port <PROTO> <PORT> on <HOST> is required by <SERVICE>, but it is in use by another process.

There is another process running that is bound to the port specified in the error. In order to proceed, you must stop the service that is using the required port.

Extraction of psql-8.2.zip failed. Verify the following:

n unzip is in the system PATH

n Sufficient disk space is available in the /tmp partition

Failed to connect to the voyencedb database on host <IP>. Check that the database service is running and try again.


n The controldb service is running on the server specified in the error

n Port TCP 5435 is reachable by the server where you are installing


VMware, Inc. 12

psql-8.2.zip is required to validate the schema version. Verify that you have sufficient disk space available in your /tmp partition.

Installation process does not respond on Linux platforms on certain virtual machines.

This is due to an improper installation. The installation process does not respond at setupmgr.cgi call which in turn tries to setup an SSL Connection. Https threads are spawned and remain as zombie processes.

Follow these steps:

1 Uninstall the existing installation manually as described in Manually uninstalling Network Configuration Manager .

2 Type the following command at the command prompt to check if the rpm file, mod_nss is present in the system:

yum list installed | grep mod_nss

3 If the rpm file m od_nss is present, delete it using the following command:

yum remove mod_nss.x86_64

4 Install Network Configuration Manager on Linux platform by following the procedures mention in the “Installation on Linux platform” section of the VMware Smart Assurance Network Configuration Manager Installation Guide.

Manually uninstalling Network Configuration Manager

Run the following scripts in the order mentioned:

1 perl SysAdmin.pl preun

2 perl AppServer.pl preun

3 perl Database.pl preun

4 perl Core.pl preun

5 perl Common.pl preun

6 perl SysAdmin.pl postun

7 perl AppServer.pl postun

8 perl Database.pl postun

9 perl Core.pl postun

10 perl Common.pl postun

Installation Errors on Windows Server

The following error messages can appear when installing Network Configuration Manager on a Windows Server.


VMware, Inc. 13

Error Message Solution

When trying to install Network Configuration Manager, the following error message is displayed:

ERROR: registry editing has been disabled by the administrator

Although, the userid used to install NCM was a member of the Administrators group, there was a Global Policy in place that disabled access to registry editing tools.

To resolve this issue:

Select Start > Run > gpedit.msc > User Configuration > Administrative Templates > System > Prevent access to registry editing tools, right Click and select Properties and set it to Not Configured.

When trying to restart Network Configuration Manager Services, the following error is displayed when Device Server Service is already running:

[FAILED]

To verify the Network Configuration Manager services that are running, and to manually stop them:

n Click Task Manager > Processes on the server and search for the following processes:

autodiscd

cfgmgrd

commmgrd

evdispatchd

syssyncd

zebedee

n To stop the processes click Task Manager > <process> to select the process and click, End Task.

n To start and stop all the Network Configuration Manager services, run:

[Product Home]/bin/ncmmaster.pl script

This platform is not supported. The supported Windows platform is:

Windows Server 2003, Enterprise Edition


C:\Windows\system32\prodspec.ini is required to validate the OS version.


n The prodspec.ini file exists

n The operating system you are installing on is officially supported by Network Configuration Manager

The Windows IIS service must be disabled. The Windows IIS service uses ports required by Apache Web Server and must be disabled before installing Network Configuration Manager.

Stop and disable the following services in the Service Management Console:

n World Wide Web Publishing Service

n HTTP SSL

n IIS Admin Service.

Failed to open C:\Windows which is required for vcredist_x86.exe validation.


If the server operating system is officially supported by Network Configuration Manager, ensure the %WINDIR% environment variable correctly maps to the directory where the Windows operating system is installed. (C:\Windows by default).


VMware, Inc. 14

Could not find an installed version of Java compatible with this product. See the Install Guide for details.


n The installed version of Java is compatible with Network Configuration Manager

n Java is installed correctly

Could not find an installed version of OpenSSL compatible with this product. See the Install Guide for details.


n The installed version of OpenSSL is compatible with Network Configuration Manager

n OpenSSL is installed correctly

Could not find an installed version of Apache HTTP Server. Verify the following:

n The installed version of Apache HTTP Server is compatible with Network Configuration Manager

n Apache HTTP Server is installed correctly

Could not find an installed version of the Visual C++ runtime compatible with this product. See the Install Guide for details.

Verify that the Visual C++ runtime libraries (vcredist_x86.exe) included with the Network Configuration Manager distribution are installed.

Could not find an installed version of Tomcat compatible with this product. See the Install Guide for details.


n The installed version of Apache Tomcat Server is compatible with Network Configuration Manager

n Apache Tomcat Server is installed correctly

The Apache Tomcat server installation path cannot contain spaces. Please re-install Tomcat into a directory that does not contain spaces (ex: C:\Tomcat5)

1 Uninstall Apache Tomcat

2 Run the Apache Tomcat installer

3 When prompted for the installation directory, enter a path that does not contain any spaces. For example, enter C:\Tomcat5.

The minimum page file size must be larger than 2000 MB. Set the page file size to a value larger than 2000. The page file setting is located in the Advanced section of Windows System Properties.

Could not determine Perl version from perl -v command. Verify the following:



Perl version <VERSION> does not match the required version <REQUIRED VERSION>.


n Install the required version of Perl and

n Verify perl is in the system PATH

Perl version command (perl -v) returned an error. Verify the following:



<FILE or DIRECTORY> is not readable. Verify that the file or directory specified in the error is readable.

<FILE or DIRECTORY> is not writable. Verify that the file or directory specified in the error is writable.

<FILE or DIRECTORY> is not executable. Verify that the file or directory specified in the error is executable.

No success connecting to <HOST> on port <PROTO> <PORT> (<SERVICE>) after 10 tries.

Check the install logs for errors. A required service may have failed to start.


VMware, Inc. 15

Port <PROTO> <PORT> on <HOST> is required by <SERVICE>, but it is in use by another process.

There is another process running that is bound to the port specified in the error. In order to proceed, you must stop the service process that is using the required port.

Extraction of psql-8.2.zip failed. Verify the following:

n unzip is in the system PATH

n Sufficient disk space is available in the /tmp partition

Failed to connect to the voyencedb database on host <IP>. Check that the database service is running and try again.


n The controldb service is running on the server specified in the error

n Port TCP 5435 is reachable by the server where you are installing

psql-8.2.zip is required to validate the schema version. Verify that you have sufficient disk space available in your /tmp partition.

Errors in the install logs

Error

Custom actions: com.zerog.ia.customcode.util.miscutils.ThrowInstallError

Status: FATAL ERROR

Additional Notes: FATAL ERROR - class com.zerog.ia.customcode.util.miscutils.ThrowInstallError

FatalInstallException: An error occurred while running the post-install script for the Core

component. The stderr output is: MAC verified OK

MAC verified OK

1 out of 1 certificate requests certified, commit? [y/n]Write out database with 1 new entries

Data Base Updated

ERROR: Timeout exceeded waiting for server configuration to sync.

ERROR: The server registration process failed. Verify that the Apache HTTP Server is running and

listening on both TCP 80 and TCP 443.

Solution

Check if Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy is enabled.

Error (for Windows)

Custom Action: com.zerog.ia.customcode.util.miscutils.ThrowInstallError

Status: FATAL ERROR

Additional Notes: FATAL ERROR - class

com.zerog.ia.customcode.util.miscutils.ThrowInstallError FatalInstallException: An error occurred

while running the post-install script for the AppServer component. The stderr output is: ERROR: The

system was unable to find the specified registry key or value.

Loading 'screen' into random state - done

ERROR: The system was unable to find the specified registry key or value.

ERROR: The system was unable to find the specified registry key or value.

wrapper | Service command: C:\Voyence\tools\sshdaemon\bin\Wrapper.exe -s C:/Voyence\tools\sshdaemon

\conf\sshd-service.conf


VMware, Inc. 16

wrapper | NCM_SSHDaemon installed.

Enter key password for <tomcat>

(RETURN if same as keystore password): WARNING: Failed to start service: ncm-msa

'chown' is not recognized as an internal or external command,

operable program or batch file.

ERROR: Unable to copy C:/Voyence/ncmmsa/log4j.properties to C:/Voyence/ncmmsa/webapps/ncm-msa/WEB-INF/

classes/log4j.properties

Solution

Uninstall the existing installtion. In the Windows registry, delete NCM-msa entry.


VMware, Inc. 17

General error messages and solutions 4This chapter includes the following topics:

n General Network Configuration Manager errors

General Network Configuration Manager errors

The following table lists general errors and solutions in Network Configuration Manager.

Error Solution

To conserve per-device communication resources, Network Configuration Manager migrates active sessions between user and privilege modes. Each driver class provides the specifications of this process in the commands for Cisco driver classes. The "disable" command is used when the session is deemed to be in the privilege mode.

When the external authentication provides the account credential in the privilege mode, the usage of saved commands executes in the user mode, which requires issuing the "disable" command in terminal communications.

The Cisco common driver code checks for the existence of a privilege password. If it does not exist, the process fails to guard against locking out of the session, and returns to the privilege mode.

This scenario can be overcome by saving a privilege password for a device in the Communications tab, this can also be done for multiple devices by appropriately highlighting the devices before accessing the tab.

A database failure warning message was displayed on a Windows server.

Recurring Daily Network Pull Job failed to schedule and remained in the approved status or executed at a wrong time.

This is a table corruption issue. The recurring jobs were created and they occupy a part of the cm_job table.

A workaround for this issue is to cluster the table by executing the following steps:

1 Stop services

2 Run the following command at the database prompt: cluster cm_job_pkey on cm_job; at the database prompt

3 Restart services

4 Observe the behavior of the Job on the next run.

JBOSS core dump is observed on Linux platforms Check for the JAVA_OPTS value.

The MaxPermSize should be 512m. Restart JBOSS.

VMware, Inc. 18

Launching of the user interface fails when it is launched using http.

Stop the iptables service using the command /etc/init.d/iptables stop

Relaunch the user interface.

Out of memory error in the client log.

When large number of device configuration is selected for saving, the out of memory error is observed.

The maximum number of device configuration that can be saved is 400 only.

Catalina displays the following error message:

The lock box stable value threshold was not met because the system fingerprint has changed. To reset the system fingerprint, open the lock box using the pass phrase. : File : /opt/smarts-ncm/lockbox/xml/csp.clb

Perform the following steps:

1 cd /opt/smarts-ncm/bin

2 source /etc/voyence.conf

3 cmd ./cstdriver -lockbox ../data/lockb.clb -passphrase <passphrase for lockbox>

4 Restart vcmaster.


VMware, Inc. 19

Common Installation Questions and Answers 5The following are common questions when installing or upgrading Network Configuration Manager.

Question Answer

Do the files need to be downloaded to a particular directory?

The product can be installed from any directory on the server or from the CD.

What do I input when the installer prompts me for a license key?

Each customer is supplied with a file containing their license key.

Enter the full path to the license file key, or browse to the location of the license file key if you are using the GUI mode of the installer.

After installing, I see several uninstall directories under [Product Home]/software/.

Do I need to run each of these to uninstall?

The Uninstall_Core uninstaller will remove the core Network Configuration Managerproduct and all components dependent on it. If you want to remove only one component, you must run that particular uninstaller.

After uninstalling Network Configuration Manageron Windows, I still see several Network Configuration Managerproducts listed under Add/Remove Programs.

Why does it say the product is already uninstalled when I try to uninstall one of them?

When you uninstall the Core product, it automatically uninstalls the other products dependent on it.

The Add/Remove Programsscreen does not automatically refresh. Pressing F5, forces the Add/Remove Programs window to refresh, which removes the other product entries from the list.

I can see the Device Drivers under Add/Remove Programs after installing the Application Server on Windows.

Why do I need Device Drivers for an Application Server install?

An Application Server install type requires the device driver package list which comes with the Device Drivers installer.

VMware, Inc. 20

What order should I start and stop the Network Configuration Managerservices?

Start and stop all of the Network Configuration Managerservices using the following commands.

For Linux, use the /etc/init.d/vcmasterscript

For Windows, use the [Product Home]/bin/ncmmaster.pl script.

Note These master scripts will start and stop all of the services in the correct order.

What should I do if I'm having trouble opening the Network Configuration Managerclient, but other users are able to log in?


n Check that your username and password are correct, and that your account is not locked out.

n Clear the Java cache on your client, close and reopen your browser.

n Reconnect to the server.


VMware, Inc. 21

Common RSA Token Service Questions and Answers 6The following are common questions when using RSA credentials and RSA tokens within Network Configuration Manager

Note The Network Configuration Manager RSA Token Server is the physical windows box on which the Network Configuration Manager RSA Token Service is installed

Question Answer

What can I do to avoid incorrect passcode tokencode generation and lockout of RSA users?

RSA Tokens are time-bound and RSA tokencode generation and usage is time based.

The RSA Authentication Manager and the Network Configuration Manager RSA Token Server must be time synchronized at all times.

What should I do before making any changes to the Token database on the Network Configuration Manager RSA Token Server?

Follow these steps to make changes to the Network Configuration Manager Token Services.

n Navigate to Control Panel -> Administrative Tools -> Services.

n Right-click on the NCM_RSATokenService, and select Stop.

n Make your changes to the Token database.

n Right-click on the NCM_RSATokenService under Control Panel -> Administrative Tools -> Services, and select Restart.

How do I ensure consistent token usage? The Application Server and the Device Servers must be communicating with the same Network Configuration Manager RSA Token Server to ensure consistent token usage.

How can I locate the Network Configuration Manager RSA Token Server using Network Configuration Manager?

To locate the Network Configuration Manager RSA Token Server using Network Configuration Manager, complete the following:

n Select System Administration from the Tools menu.

n Navigate to System Administration -> Global -> Access -> RSA Token Server.

I am having multithreading issues when I run the RSA GUI Application and the Network Configuration Manager RSA Token Service at the same time on the Network Configuration Manager RSA Token Server. How can I fix this?

It is advisable to avoid using the RSA GUI Application.

To import or delete RSA Tokens use the vcRSATokenService tool. See the Installing and Configuring the RSA Token Service on Windows Server 2003 document for more information.

VMware, Inc. 22

How can I view my systems token usage statistics? To view your systems token usage statistics, do the following:

n Open a web browser.

n Navigate to https://<VCTokenServerIPAddress>:< PortNumber>, where <VCTokenServerIPAddress> is the IP Address of your Network Configuration Manager RSA Token Server and <PortNumber> is the port number created during installation.

I received a communication error in Network Configuration Manager for the RSA Token Server. How do I fix this?

Follow these steps to correct communication errors between the RSA Token Server and Network Configuration Manager.

n Navigate to Control Panel -> Administrative Tools -> Services on the RSA Token Server.

n Ensure the NCM_RSATokenService is running.

n Ensure the RSA Token Server parameters match the parameters found in the System Administration -> Global -> Access -> RSA Token Server screen in Network Configuration Manager.

I have imported tokens to the RSA Token Server and communication with the RSA Token Service is established, but no tokens are being retrieved by the RSA Token Server Client. How do I fix this?


n Navigate to Control Panel -> Administrative Tools -> Services on the RSA Token Server.

n Ensure the NCM_RSATokenService is running under the same Windows User Account which was logged into the RSA Token Server when RSA Tokens were imported.


VMware, Inc. 23

vmware smart assurance network configuration manager ... · preface 1 as part of an effort to...

Documents