.
Doc ID: SOLN201674
Version: 84.0
Status: Published
Published date: 09 May 2012
Updated: 25 Mar 2016
Categories: Avaya Aura® System Manager , Break/Fix , Release Notes & Software Update Notes , Avaya Aura® Session Manager , Application & Technical Notes
Author: Mohammed Ahmed
Last Modifier: Lyle Schaffer
Details
SMGR 6.1 and later release with any patches
Problem Clarification
System Manager: Cannot login the web interface with admin user
System Manager: Unable to access web interface
System Manager: The web interface is not loading
System Manager: How to renew certificates
System Manager: Certificate expired
System Manager: Certificates expired on System Manager
System Manager: Not able to access web interface. Get certificate error.
System Manager: cant't acces the SMGR via web
System Manager 5.2.x, 6.0.x, 6.1.x, 6.2.x, 6.3.x Certificate Renewal Guide
The certificates on System Manager 6.3 and earlier expire after 2 years. This guide explains how to determine if your certificates are expired and how to renew them.
The procedure is applicable for System Manager 6.3.x too. The utility to renew the expired System Manager certificate was written for versions 6.1 and 6.2 but applicable on 6.3 as well.
This issue may also be reported as:
FAQ:
Q - Is renewing the System Manager certificates Service affecting?
A - Not call affecting but you will be unable to access System Manager while this process is being completed. System Manager is an administration web interface for a number of Avaya products so you will be unable to use System Manager to administer those systems while the certificates are being updated.
Q - Will Avaya update my certificates for me?
A - To some extent this depends on your support contract but usually Avaya will NOT perform this work free of charge. This is a customer installable PSN and certificate expiry is part of the normal lifecycle of the product. If you have a problem installing the certificates and a valid support contract then of course support will assist with your issue.
Q - I am having trouble downloading the utility where can I get some help?
A - You can find the contact details for PLDS support for your region here https://support.avaya.com/contact/
Q - Does System Manager send out an alarm when my certificates expire or are about to expire?
A - This feature has been added to System Manager 6.2 by default at 90, 60, and 30 days minor, major and critical respectively.
Q - Will installing a Service Pack update my certificates?
A - No however upgrading to a new release for example 6.0 to 6.1 or 6.1 to 6.2 or 6.2 to 6.3 will. This will only work however if the certificates have not already expired, you must not try to upgrade / install a service pack while you have expired certificates
Have my System Manager certificates expired?
The first step is to confirm if you are affected by this problem or not. You may have one of the more obvious symptoms like if this is presented on login below. if you have this error then your certificates have expired. The below error is for system manager with version 6.0.x with no login possible into UI at all.
The below error is for system manager with version 6.1.x Same error occurs on 6.2.x
The text of this error to make it searchable is:
/pages/Welcome.xhtml @70,67 value="": Error reading 'model' on type com.avaya.mgmt.console.framework.bean.ClientNavaig ationTree_$$_javassist_seam_6.
To be 100% sure that the certificate has expired, check the certificate itself to see its expiry date. In the address bar of your web browser there will be a pictogram which looks like a padlock. It is to the left of the "https" address in Chrome and Firefox and to the right in Internet Explorer. If the web browser cannot verify the origin of the certificate because it was issued by a 3rd party non-trusted Certificate Authority (just like Avaya's internal CA), then Chrome will put a red X on the padlock. IE in this case will display a “Certificate Error” button to the right of the address bar. Please note, the “Certificate Error” button does not mean that the certificate has expired.
In order to open the certificate, click on the pictogram of the padlock (or on the "Certificate Error" button in IE), then do the following depending on which browser you are using:
· Chrome: click on "Certificate Information".
· Firefox: click on "More Information" then "View Certificate".
· IE: click on "View Certificate".
Finally, the certificate will show up and you can read the validity information on the General tab:
If you are able to log into the SMGR, you can confirm if you are affected by going to Application Management > System Manager > Tick System Manager > More Actions > Configure Identity Certificates as shown in the screenshot below:
This will display all the System Manager certificates, in the screenshot below the certificates are not expired. If any of the certificates are expired you will need to run the certificate renewal utility.
Also take note if the Certificates are near to expiry as if the certificates do expire you may be unable to access your System Manager or administer your Session Manager.
NOTE: The WebLM Legacy certificate is not used within SMGR so this particular certificate may show as expired without actually causing any problems
Cause
Why has this happened?
The Certificates in your System Manager were made valid for 2 years from the installation date. If you have upgraded your System Manager to a new major release since then the certificates will have been extended by 2 years at that time.
Certificates cannot be made valid indefinitely so there has to be an expiry date. Once this expiry date has passed you must renew your certificates.
This is part of the normal lifecycle of the product.
In the case of System Manager 6.3.x, the certificates should renew automatically. There is a bug in the renewal process on versions older than 6.3.10 due to which the certificates do not renew in every case. In order to fix this bug, the System Manager and Session Manager servers have to be upgraded to the latest version - 6.3.16 at the time of writing this update to the article (05-Feb-2016).
Solution
Please click here. (https://support.avaya.com/ext/index?...&id=SOLN201674) to view the full solution on support.avaya.com.
- Additional Relevant Phrases
Can't log into System Manager some internal error has occurred in the service unable login to SMGR web interface Certificates have expired on System Manager Patch upgrade failed on SMGR due to expired certificates. How to renew? System Manager webconsole is down System Manager web console is down
Version: 84.0
Status: Published
Published date: 09 May 2012
Updated: 25 Mar 2016
Categories: Avaya Aura® System Manager , Break/Fix , Release Notes & Software Update Notes , Avaya Aura® Session Manager , Application & Technical Notes
Author: Mohammed Ahmed
Last Modifier: Lyle Schaffer
Details
SMGR 6.1 and later release with any patches
Problem Clarification
System Manager: Cannot login the web interface with admin user
System Manager: Unable to access web interface
System Manager: The web interface is not loading
System Manager: How to renew certificates
System Manager: Certificate expired
System Manager: Certificates expired on System Manager
System Manager: Not able to access web interface. Get certificate error.
System Manager: cant't acces the SMGR via web
System Manager 5.2.x, 6.0.x, 6.1.x, 6.2.x, 6.3.x Certificate Renewal Guide
The certificates on System Manager 6.3 and earlier expire after 2 years. This guide explains how to determine if your certificates are expired and how to renew them.
The procedure is applicable for System Manager 6.3.x too. The utility to renew the expired System Manager certificate was written for versions 6.1 and 6.2 but applicable on 6.3 as well.
This issue may also be reported as:
- Unable to login to SMGR.
- SMGR certificates expired.
- System Manager certificates expired.
- ERROR when logging in /pages/Welcome.xhtml@70,67 value="":Error reading 'model' on type com.avaya.mgmt.console.framework.bean.ClientNavaig ationTree_$$_javassist_seam_6.
- System Manager certificate renewal.
- System Manager backup fails.
- PSN003661u.
- System Manager blank page.
- Cannot reach EM web page from SMGR UCM: Web3610: An internal error has occurred! Severity: Major.
- Cannot access Software Deployment from UCM.
- All data missing from SMGR (when logging in as an LDAP user).
- The Web Server X509 certificate is expired.
FAQ:
Q - Is renewing the System Manager certificates Service affecting?
A - Not call affecting but you will be unable to access System Manager while this process is being completed. System Manager is an administration web interface for a number of Avaya products so you will be unable to use System Manager to administer those systems while the certificates are being updated.
Q - Will Avaya update my certificates for me?
A - To some extent this depends on your support contract but usually Avaya will NOT perform this work free of charge. This is a customer installable PSN and certificate expiry is part of the normal lifecycle of the product. If you have a problem installing the certificates and a valid support contract then of course support will assist with your issue.
Q - I am having trouble downloading the utility where can I get some help?
A - You can find the contact details for PLDS support for your region here https://support.avaya.com/contact/
Q - Does System Manager send out an alarm when my certificates expire or are about to expire?
A - This feature has been added to System Manager 6.2 by default at 90, 60, and 30 days minor, major and critical respectively.
Q - Will installing a Service Pack update my certificates?
A - No however upgrading to a new release for example 6.0 to 6.1 or 6.1 to 6.2 or 6.2 to 6.3 will. This will only work however if the certificates have not already expired, you must not try to upgrade / install a service pack while you have expired certificates
Have my System Manager certificates expired?
The first step is to confirm if you are affected by this problem or not. You may have one of the more obvious symptoms like if this is presented on login below. if you have this error then your certificates have expired. The below error is for system manager with version 6.0.x with no login possible into UI at all.
The below error is for system manager with version 6.1.x Same error occurs on 6.2.x
The text of this error to make it searchable is:
/pages/Welcome.xhtml @70,67 value="": Error reading 'model' on type com.avaya.mgmt.console.framework.bean.ClientNavaig ationTree_$$_javassist_seam_6.
To be 100% sure that the certificate has expired, check the certificate itself to see its expiry date. In the address bar of your web browser there will be a pictogram which looks like a padlock. It is to the left of the "https" address in Chrome and Firefox and to the right in Internet Explorer. If the web browser cannot verify the origin of the certificate because it was issued by a 3rd party non-trusted Certificate Authority (just like Avaya's internal CA), then Chrome will put a red X on the padlock. IE in this case will display a “Certificate Error” button to the right of the address bar. Please note, the “Certificate Error” button does not mean that the certificate has expired.
In order to open the certificate, click on the pictogram of the padlock (or on the "Certificate Error" button in IE), then do the following depending on which browser you are using:
· Chrome: click on "Certificate Information".
· Firefox: click on "More Information" then "View Certificate".
· IE: click on "View Certificate".
Finally, the certificate will show up and you can read the validity information on the General tab:
If you are able to log into the SMGR, you can confirm if you are affected by going to Application Management > System Manager > Tick System Manager > More Actions > Configure Identity Certificates as shown in the screenshot below:
This will display all the System Manager certificates, in the screenshot below the certificates are not expired. If any of the certificates are expired you will need to run the certificate renewal utility.
Also take note if the Certificates are near to expiry as if the certificates do expire you may be unable to access your System Manager or administer your Session Manager.
NOTE: The WebLM Legacy certificate is not used within SMGR so this particular certificate may show as expired without actually causing any problems
Cause
Why has this happened?
The Certificates in your System Manager were made valid for 2 years from the installation date. If you have upgraded your System Manager to a new major release since then the certificates will have been extended by 2 years at that time.
Certificates cannot be made valid indefinitely so there has to be an expiry date. Once this expiry date has passed you must renew your certificates.
This is part of the normal lifecycle of the product.
In the case of System Manager 6.3.x, the certificates should renew automatically. There is a bug in the renewal process on versions older than 6.3.10 due to which the certificates do not renew in every case. In order to fix this bug, the System Manager and Session Manager servers have to be upgraded to the latest version - 6.3.16 at the time of writing this update to the article (05-Feb-2016).
Solution
Please click here. (https://support.avaya.com/ext/index?...&id=SOLN201674) to view the full solution on support.avaya.com.
- Additional Relevant Phrases
Can't log into System Manager some internal error has occurred in the service unable login to SMGR web interface Certificates have expired on System Manager Patch upgrade failed on SMGR due to expired certificates. How to renew? System Manager webconsole is down System Manager web console is down
Comment