Topic
  • 6 replies
  • Latest Post - ‏2013-01-04T20:06:24Z by SystemAdmin
Chaaksa
Chaaksa
1 Post

Pinned topic Can´t startup web management

‏2010-05-31T09:08:26Z |
Hi
I have a datapower xi50 that one was working correctly and swicht off a few days ago.
On having started it I neither can accede to web management, nor can start it.

web-mgmt down

When i try to start it i can see this:

% Required referenced object not up

Web management: successfully started
show idcred

idcred: web-mgmt_IdentificationCredentials down
Can someone say to me that I have to do? Thanks
Updated on 2013-01-04T20:06:24Z at 2013-01-04T20:06:24Z by SystemAdmin
  • mmatamoros
    mmatamoros
    60 Posts

    Re: Can´t startup web management

    ‏2010-05-31T18:00:16Z  
    It seems that the certificate and key for the SSL session is corrupted or is expired. So even as the Web management interface is up it cannot establish an SSL connection.
    What you could do is create a new ssl proxy profile with a self-signed certificate and then assign it to the web management interface. This will bring up the configuration of the SSL which is missing.
    Here the steps would be:
    • Generate a new self-signed cert and private key
    • Name a new SSL proxy profile
    • Enter web-mgmt configuration and assign the SSL proxy profile to the interface
    -Test connection

    Once inside of the web management interface you can create a new self-signed certificate in the menu

    Administration --- System Control --- Generate device certificate

    This will put a new key and certificate for the web management interface.
  • chaksa
    chaksa
    1 Post

    Re: Can´t startup web management

    ‏2010-06-01T09:29:18Z  
    It seems that the certificate and key for the SSL session is corrupted or is expired. So even as the Web management interface is up it cannot establish an SSL connection.
    What you could do is create a new ssl proxy profile with a self-signed certificate and then assign it to the web management interface. This will bring up the configuration of the SSL which is missing.
    Here the steps would be:
    • Generate a new self-signed cert and private key
    • Name a new SSL proxy profile
    • Enter web-mgmt configuration and assign the SSL proxy profile to the interface
    -Test connection

    Once inside of the web management interface you can create a new self-signed certificate in the menu

    Administration --- System Control --- Generate device certificate

    This will put a new key and certificate for the web management interface.
    Thank you very much

    I´m new in administration via command line interface,

    How i can follow the steps?

    * Generate a new self-signed cert and private key
    * Name a new SSL proxy profile
    * Enter web-mgmt configuration and assign the SSL proxy profile to the interface

    wath generated a new slef-signed cert and private key via command line?

    If i have a checkpoint can i restore it?
  • RCW
    RCW
    232 Posts

    Re: Can´t startup web management

    ‏2010-06-02T06:41:21Z  
    • chaksa
    • ‏2010-06-01T09:29:18Z
    Thank you very much

    I´m new in administration via command line interface,

    How i can follow the steps?

    * Generate a new self-signed cert and private key
    * Name a new SSL proxy profile
    * Enter web-mgmt configuration and assign the SSL proxy profile to the interface

    wath generated a new slef-signed cert and private key via command line?

    If i have a checkpoint can i restore it?
    Hi,

    this might help you:

    1- co
    2- crypto
    3- keygen C "US" ST "MA" L "Cambridge" O "DataPower" CN "Alice" rsa "4096" days "365" export-key gen-sscert export-sscert gen-object object-name "AliceKey"
    4- idcred "AliceIDCred" "AliceKey" "AliceKey"
    5- profile "AliceServerCP" "AliceIDCred" option-string OpenSSL-default
    6- exit
    7- sslproxy "AliceServerPP" reverse "AliceServerCP" sess-timeout 300 cache-size 20
    8- web-mgmt
    9- ssl AliceServerPP
    10- exit
    11- write mem

    Please note that this certificate will expire after 365 days.

    I can imagine that your certificate simply expired recently. But you can also check the output of the following command:
    show crypto-engine and report the output.

    Hope this helps.
    Rolf
  • ocdtech
    ocdtech
    1 Post

    Re: Can´t startup web management

    ‏2011-08-19T22:16:20Z  
    • RCW
    • ‏2010-06-02T06:41:21Z
    Hi,

    this might help you:

    1- co
    2- crypto
    3- keygen C "US" ST "MA" L "Cambridge" O "DataPower" CN "Alice" rsa "4096" days "365" export-key gen-sscert export-sscert gen-object object-name "AliceKey"
    4- idcred "AliceIDCred" "AliceKey" "AliceKey"
    5- profile "AliceServerCP" "AliceIDCred" option-string OpenSSL-default
    6- exit
    7- sslproxy "AliceServerPP" reverse "AliceServerCP" sess-timeout 300 cache-size 20
    8- web-mgmt
    9- ssl AliceServerPP
    10- exit
    11- write mem

    Please note that this certificate will expire after 365 days.

    I can imagine that your certificate simply expired recently. But you can also check the output of the following command:
    show crypto-engine and report the output.

    Hope this helps.
    Rolf
    Hello,

    Very sorry for resurrecting an old thread.

    I have done all the steps mentioned in this thread. However, once successfully connected to the web gui, the user name and password that i have set up does not work. It says "authentication failed." Please advise.

    Thanks for your time,

    -N
  • SystemAdmin
    SystemAdmin
    6772 Posts

    Re: Can´t startup web management

    ‏2011-08-20T01:16:56Z  
    Here are few things needs to be check.. Is your DP GUI under SSL ?
    How you are accessing the box locally or RBM ..
    Is admin password / user working via CLI ?
  • SystemAdmin
    SystemAdmin
    6772 Posts

    Re: Can´t startup web management

    ‏2013-01-04T20:06:24Z  
    This worked perfect for us!!!

    Thank You!!!