09.12.2012 Views

Server Alarms - Avaya Support

Server Alarms - Avaya Support

Server Alarms - Avaya Support

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>Server</strong> <strong>Alarms</strong><br />

TlsManager<br />

The Transport Layer Security Manager allows third-party certificates to be loaded. It will not<br />

allow a corrupt certificate to be loaded.<br />

A security log message is generated as a result of a Communication Manager telephony<br />

application installing CA certificates from /etc/opt/ecs/certs/CA/all-ca.crt. Successful and failed<br />

attempts are noted in /var/log/secure.*. The format is<br />

logmanager: gip(26/1) CA_certs: load of CA certificates from<br />

/etc/opt/ecs/certs/CA/all-ca.crt succeeded (or failed).<br />

The event also generates an alarm to notify the administrator of partial or complete outages<br />

(some or all CA certificates failed to install), and also when the system is operating properly<br />

(i.e., any error condition cleared).<br />

If the telephony application fails to install any or all specified CA certificates, the Communication<br />

Manager log will contain one or more of the following error messages (where x is the<br />

Communication Manager release number):<br />

CMx_proc_err: pro=7204, err=201, seq=22145,da1=,da2= - This indicates<br />

that the number of CA certificates specified exceeds the number supported by the<br />

telephony application. is the overlimit value and is the maximum number of<br />

certificates supported. To resolve, use tlscertmanage to edit the list, then restart the<br />

telephony application.<br />

CMx_proc_err: pro=7204, err=201, seq=22146,da1=,da2=0 - This indicates that a<br />

failure occurred when attempting to install the n’th CA certificate into the telephony<br />

application. is the index of the CA certificate list item that failed to install. To resolve,<br />

use tlscertmanage to remove, then re-add the certificate. Once re-added, restart the<br />

telephony application.<br />

CMx_proc_err: pro=7204, err=201, seq=22147,da1=0,da2=0 - This indicates that the CA<br />

certificate list file, /etc/opt/ecs/certs/CA/all-ca.crt, cannot be opened. This may be due to<br />

a user privilege issue or a missing/corrupted file. Use tlscertmanage to reconstruct<br />

the CA certificate list, then restart the telephony application.<br />

Table 32: TlsManager <strong>Alarms</strong><br />

Event<br />

ID<br />

Alarm<br />

Level<br />

Back to: Linux <strong>Server</strong> <strong>Alarms</strong><br />

Alarm Text, Cause/Description, Recommendation<br />

2 MIN The load of TlsManager CA certificates failed.<br />

112 Maintenance <strong>Alarms</strong> for <strong>Avaya</strong> Communication Manager, Media Gateways and <strong>Server</strong>s

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!