×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

(OP)
I recently installed a new AAM 7.1 Storage server with 2 APP servers. Took a backup of the old AAM 6.3 systems and restored the data to the new 7.1 servers. Not many issues really other then needing to stop and start messaging and reboot of server to get the data to restore properly.

Only problem I had was the system was past 30 day grace since deployment and license was in error / restricted mode.

I had installed a new license in the new system manager 8 and verified it had everything it needed to work.

Only issue was not matter what I did it would not work, only thing I could think of was Certs....

I was going to install certs anyway from SMGR (self signed certs) and use them on AAM. So I did just that. License worked and went into normal stateonce complete.
Certificates always catch me off guard especially when I am not thinking of using TLS.

I briefly went through the AAM admin guide, and did not find any mention of requiring certs to SMGR for licensing to work, but I am sure it is noted somewhere. So I am adding that note here as well.

Anyway moral of this short random story.

If you are using System Manager as your WebLM / License Server, Just do your self a favor and create the application cert and download the root SMGR cert and install them.




RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

Yeah...we all ran into that at 7.1 SMGR. It was the first SMGR WebLM that offered a cert signed by your specific SMGR CA created at install. Every WebLM before that used an Avaya default cert. So, all the products as a default in their WebLM client's TLS truststore had Avaya's default CA that SMGR WebLM used and everything just worked.

Some products like AES and CM made you import the SMGR CA cert. SBC had fixweblmcert.sh or something. AAM you used to have to get Avaya to root in the box and do it themselves.

It sucked!

RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

(OP)
Yeah the other issue I keep running into is I do not enable root anymore when asked while deploying via SDM, no customer is willing to sign the waiver to have root enabled. So that has been putting some issues back in the hands of Avaya when we use to be able to just login as root and fix the issue. But it makes sense I can see that some people having root access have caused some issues that could have been avoided and Avaya has probably had enough of that.


RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

Wait till you play with SMGR 8. Userland alias commands like rebootSMGR just don't work. Until you get real root and "service jboss restart" yourself, nothing short of a dirty power off on the VM makes it come back. VMware tools "restart guest" or alias commands to reboot linux or restart jboss have at best a 50/50 chance of it coming back.

R8 has customer root in the OVA deployment that you can enable without the waiver.

I'm not comfortable managing systems the way I did at R6 on R7 or 8 without root.

RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

(OP)
I am going to have to research the root access thing, we were told customers need to sign waivers for root to be enabled, but that was at version 6.3 and 7 was still fairly new. I see the option in the SDM deployment but I have not been checking in it due to all the systems stating right off the login screen if root is enabled or not.

I was able to reboot SMGR successfully, however the commands the doc say do not work, you can go to the directory

CODE -->

cd /opt/Avaya/vsp
bash ./rebootSMGR -r 

that is what I have been doing for 7 and 8 without root.

RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

I've been using the "poweerOffVM" command for System Manager, as listed in this documentation:
https://documentation.avaya.com/bundle/deployingAv...

This has been working on v8 and I haven't seen any ill effects... yet. Probably next time...

RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

Starting in R8 you can get root access in just about every Avaya product. Some of the products require deployment via the SDM client in order to enable the root login so you won't get root if you simply deploy the OVA via vCenter/ESXi host.

The WebLM issue is especially irritating since the other products such as ASBCE which had this problem has a script you can run to import the System Manager CA certificate. I've been going back and forth with Avaya about having this in the documentation.

In AAM7.1 you should be able to import the System Manager CA.

RE: Random Knowledge.- AAM 7.x System Manager 8 - Not Acquiring license. Need Certs installed

Relevant notes from the Avaya support database:
https://support.avaya.com/public/index?page=conten...
https://support.avaya.com/ext/index?page=content&a...
There are more, but two examples should get the idea acrross.
Also, https://downloads.avaya.com/css/P8/documents/10105... page 47 <<WebLM cert information. It stopped using the SIP CA cert around 7.1 and resulted in products not trusting the issuing CA for the WebLM service. Details are in the SOLNs attached, and also in some documentation.

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close