BTC1041I command to register the common agent with the agent registration service

Explanation: No additional information is available for this message.

BTC1042I command to renew the certificate revocation list

Explanation: No additional information is available for this message.

BTC1043I command to renew the certificate of the common agent

Explanation: No additional information is available for this message.

BTC1044I command to reset the security credentials

Explanation: No additional information is available for this message.

BTC1045E The security service failed to obtain the common agent description.

Explanation: The registration is missing the common agent description. The description is required. If the description is missing, the registration will fail.

System action: The registration failed because the common agent description is missing.

Administrator Response: The agent_mgrclient bundle might not be deployed correctly within the common agent framework. Try to reinstall the common agent or contact customer support.

BTC1046E The common agent failed to validate security credentials.

Explanation: Either the credentials are currently not valid, or the ID information in the credentials is incorrect.

System action: Communication from the common agent will fail.

Administrator Response: Update the common agent with valid credentials.

BTC1047E The common agent failed to renew its security credentials.

Explanation: The common agent failed to renew its certificate with the certificate authority of the agent manager. This message appears if one of the following conditions is met:

vThe certificate renewal port of the agent manager could not be reached, either because it is not active, an error exists involving network configuration, or

the service location information stored in the common agent properties file is incorrect.

vThe common agent does not trust the agent manager certificate authority because the current certificate used by the agent manager certificate authority does not exist in the common agent truststore.

vThe common agent certificate is not valid. The operating system GUID or the installation location of the common agent has been modified since the initial registration. The change is causing the client authentication that is required for the certificate renewal to fail.

vThe common agent certificate has expired. This might have caused the client authentication that is required for the certificate renewal to fail.

vThe common agent certificate has been revoked. This might have caused the client authentication that is required for the certificate renewal to fail.

System action: The common agent will continue to run with its existing credentials. Attempting to contact the common agent might result in a failure, particularly if its credentials are not valid.

Administrator Response: Attempt to determine which condition that was described in the explanation is met. Check for exceptions and associated messages in the trace output file, traceAgent.log, to help find the problem.

If the log indicates that the common agent was not able to contact the certificate renewal port of the agent manager, make sure the agent manager is up and running, ensure that the location information stored in the common agent properties file is correct, verify that the agent manager can be reached from the common agent using the host name specified in the common agent properties file, and make another attempt to renew its certificate.

If the log indicates that the SSL handshake between the common agent and the agent manager failed, either the common agent does not trust the agent manager, or the common agent credentials are not valid. Attempt to resolve the situation by completing the following steps:

1.Shutdown the common agent.

2.Backup and delete the contents of the cert directory.

3.Place the agentTrust.jks file from the agent manager in the empty cert directory.

4.Start the common agent. Since the cert/agentKeys.jks file does not exist, the common agent will attempt to register again. If the common agent has the correct registration password, and the agent manager allows duplicate registration, the common agent should register successfully and receive a new certificate.

If the common agent does not have renewed or new credentials after completing the steps above, contact customer support.

182Tivoli Intelligent Orchestrator Problem Determination and Troubleshooting Guide

Page 194
Image 194
IBM 51 manual BTC1042I command to renew the certificate revocation list, BTC1044I command to reset the security credentials