Black Box EncrypTight Enforcement Point (ETEP), ET1000A Error State Symptoms and Solutions

Models: ET10000A ET0100A ET0010A ET1000A

1 88
Download 88 pages 24.35 Kb
Page 74
Image 74
Error State

Troubleshooting

Error State

Table 27

Error State Symptoms and Solutions

 

 

 

Symptom

 

Explanation and Possible Solutions

The Alarm LED is illuminated

The ETEP enters an error state when a boot test fails, the

 

 

operating temperature threshold is exceeded, signature errors are

 

 

detected on critical files pertaining to policies and keys. or a FIPS

 

 

test fails when the ETEP is in FIPS mode.

 

 

When the ETEP is in an error state the Alarm LED illuminates, and

 

 

the appliance discards all packets it receives. Depending on the

 

 

error, other notifications may be sent (traps, status messages to the

 

 

EncrypTight Manager or the terminal).

 

 

To recover from an error state when FIPS mode is disabled:

 

 

When the ETEP detects a corrupted policy, it enters an error

 

 

state and sends a critical error trap to the management station.

 

 

To recover, redeploy the policies and then reboot the ETEP.

 

 

For non-policy errors, reboot the appliance. If the operating

 

 

temperature threshold is exceeded, cycle the power to restart

 

 

the ETEP.

 

 

If a failure occurs during the boot process, refer to “Diagnostic

 

 

Code Display” on page 75 for additional troubleshooting

 

 

information.

 

 

If the actions listed above do not clear the error, contact

 

 

customer support.

 

 

 

Error State Symptoms and SolutionsTemperature Threshold and Discarded TrafficManual background NOTE

A FIPS failure puts the ETEP into FIPS error mode, lights the alarm indicator, and puts dataplane in discard mode, but does not zeroize the ETEP. A user can recover by doing a reboot or exiting FIPS mode

Temperature Threshold and Discarded Traffic

When the ETEP enters an alarm state due to a temperature failure, the Alarm indicator illuminates and the ETEP discards traffic. The ETEP remains in an error state until it is rebooted. However, once the temperature drops below the critical threshold, the alarm indicator turns off and the ETEP stops reporting an alarm state to EncrypTight Manager, even though the alarm state has not been cleared and the ETEP continues to discard traffic.

If the ETEP is discarding traffic, check the system log for temperature warning notices to confirm that a temperature error occurred. Reboot the ETEP to resume normal operation.

74

ETEP Installation Guide

Page 74
Image 74
Black Box EncrypTight Enforcement Point (ETEP), ET1000A, ET0010A Error State, Temperature Threshold and Discarded Traffic