Logins against one STS are failing while another one is potentially working. The following errors are seen in the "CloudAccessManagerSTS.txt" log file.
NOTE:
The certificates referenced here are computer certificates in the Windows Cert Store. In MMC add a Snap-in, select Certificates, Computer Account,then click ok. In the Certificates window select personal, Certificates. In the right hand pane we are discussing the 'Dell Cloud Access Manager STS' certificate specifically.
It is recommended to backup the database and take snapshots of the STS servers before following the below steps as a precaution.
RESOLUTION # 1
In the STS logs the thumbprint requested will match the thumbprint in either STS1 or STS2. You can see the Thumbprint by double-clicking a certificate, selecting details, the thumbprint is at the bottom of the list.
Step 1.
On the STS Server that does not match, first export the certificate, backing it up along with the private key. Then delete the certificate.
NOTE: It is very important the certificate be backed up in case the wrong one is selected by mistake.
Step 2.
On the STS Server that has a certificate that matches the thumbprint in the logs, go to the same location, Export the certificate including the private key. DO NOT delete this certificate.
Step 3.
Copy this certificate to the STS where we deleted the certificate and import it. You can do this in the Certificates folder:
In MMC add a Snap-in, select Certificates, Computer Account,then click ok. In the Certificates window select personal, Certificates. In the right hand pane Right Click, select 'All Tasks', then import and follow the prompts at this point.
After five to 10 minute the error should resolve and logins should begin working normally. If the error is still occurring a restart of the STS service might be required.
Click Start > Run > Type Services.msc, click ok, Locate 'Dell Redistributable Secure Token Server', Right Click and Select restart.
DEFECT:
This is being tracked as defect # 710340 and will be resolved in a future release of Cloud Access Manager.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center