cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1779
Views
10
Helpful
4
Replies

MSE problem affter upgrading

stephendrkw
Level 3
Level 3

Hi all,

I upgraded MSE today from 7.2.110.0 to 7.5.102.101 using the release notes, after the upgrade I get the following error:

[root@ukgrelg-174-mse init.d]# /etc/init.d/msed start

Starting MSE Platform

Starting Apache HTTPD Server

Starting Health Monitor, Waiting to check the status.

Health Monitor successfully started

ERROR! Apache Service did not startup. Please refer to apache error log under framework logs.

Stopping MSE Platform

ERROR! Apache Service did not startup. Please refer to apache error log under framework logs.

..

MSE platform shutdown complete

Flushing firewall rules: [  OK  ]

Setting chains to policy ACCEPT: filter [  OK  ]

Unloading iptables modules: [  OK  ]

apache]# tail error_log

[Thu Oct 10 15:49:44 2013] [notice] caught SIGTERM, shutting down

[Thu Oct 10 15:50:00 2013] [error] Password for slot NSS FIPS 140-2 Certificate DB is incorrect.

[Thu Oct 10 15:50:00 2013] [error] NSS initialization failed. Certificate database: /var/mse/certs/nss/.

[Thu Oct 10 15:50:00 2013] [error] SSL Library Error: -8177 The security password entered is incorrect

[Thu Oct 10 15:54:56 2013] [error] Password for slot NSS FIPS 140-2 Certificate DB is incorrect.

[Thu Oct 10 15:54:56 2013] [error] NSS initialization failed. Certificate database: /var/mse/certs/nss/.

[Thu Oct 10 15:54:56 2013] [error] SSL Library Error: -8177 The security password entered is incorrect

[Thu Oct 10 15:58:16 2013] [error] Password for slot NSS FIPS 140-2 Certificate DB is incorrect.

[Thu Oct 10 15:58:16 2013] [error] NSS initialization failed. Certificate database: /var/mse/certs/nss/.

[Thu Oct 10 15:58:16 2013] [error] SSL Library Error: -8177 The security password entered is incorrect

I've ran ]# /opt/mse/framework/bin/CertMgmt.sh  and choose "9 show certificate configuration", as I expected this command displays previous certs  before my upgrade. Why there are cert password mistmatches in the apache logs I'm not sure why.

4 Replies 4

stephendrkw
Level 3
Level 3

TAC Engineer solved the problem as below

- /etc/init.d/msed stop

Remove the certificate database

– rm –rf /var/mse/certs/nss

cd /opt/mse/framework/bin/

./installNewCertificateForFIPS.sh

Restart the MSE

- /etc/init.d/msed restart


Nice - thanks for sharing.

Thanks Stephen for sharing this useful information 5+

Thanks & Regards

Vinay Sharma

Community Manager

Thanks & Regards

pchaudhary2
Level 1
Level 1

This is really Useful info...Thanks Stephen !!!!

Review Cisco Networking products for a $25 gift card