Cisco IdS is in Partial Service and SAML Certificate Expiry Indicator on Nodes Dashboard UI Turns Red

From DocWiki

Jump to: navigation, search

Cisco IdS is in Partial Service and SAML Certificate Expiry Indicator on Nodes Dashboard UI Turns Red

Problem Summary Cisco IdS is in partial service and SAML Certificate Expiry indicator on nodes dashboard UI turns Red.
Error Message 2016-03-09 17:17:34.870 IST(+0530) default ERROR [pool-3-thread-1] com.cisco.ccbu.ids CertificateMonitor.java:83 - Certificate has reached the expiry date Wed Mar 09 17:17:17 IST 2016
2016-03-09 17:17:34.870 IST(+0530) default DEBUG [pool-3-thread-1] com.cisco.ccbu.ids IdSStateManager.java:77 - Health event with id SAML_CERTIFICATE_EXPIRED has come from com.cisco.ccbu.ids.security.CertificateMonitor that can potentially change the state from STATE_IN_SERVICE
2016-03-09 17:17:34.870 IST(+0530) default DEBUG [pool-1-thread-1] com.cisco.ccbu.ids IdSStateManager.java:82 - event SAML_CERTIFICATE_EXPIRED posted to the current processor com.cisco.ccbu.ids.state.InServiceIdSStateProcessor@163668
2016-03-09 17:17:34.880 IST(+0530) default DEBUG [pool-1-thread-1] com.cisco.ccbu.ids IdSStateManager.java:84 - event SAML_CERTIFICATE_EXPIRED posted to the current processor resulted in the new state STATE_PARTIAL_SERVICE
2016-03-09 17:17:34.880 IST(+0530) default INFO [pool-1-thread-1] com.cisco.ccbu.ids IdSStateManager.java:101 - changing the state as current state STATE_IN_SERVICE is different from new state STATE_PARTIAL_SERVICE as a result of SAML_CERTIFICATE_EXPIRED
Possible Cause

SAML certificate has expired. 

Recommended Action
Regenerate certificates.

Release Release 11.5(1)
Associated CDETS # None


Rating: 0.0/5 (0 votes cast)

Personal tools