Topic
8 replies Latest Post - ‏2013-06-18T11:14:48Z by _tony
_tony
_tony
3 Posts
ACCEPTED ANSWER

Pinned topic unable to obtain zPDTA license

‏2013-06-13T12:29:32Z |

Hi

We are experiencing difficulties using a zPDT token to start up RD&T. Steps taken:

  • Install RD&T from scratch to a server using RHEL 6.3 as the base Linux os.
  • Activated the zPDT token using SecureUpdateUtility and Resourcelink activation process. It seemed to succeed ok.
  • The USB stick was then unplugged and plugged back in after few seconds.

Here are the outputs from SecureUpdateUtility, uimcheck and zPDT start:

[root@RDTEST01 bin]# ./SecureUpdateUtility -u HPserv.upw

-------------------------------------------------------------------------------

                       Secure Update Utility

                        Sentinel Keys 1.3.1

         Copyright (C) 2009 SafeNet Inc. All rights reserved.

-------------------------------------------------------------------------------

Success!

Running uimcheck ...

The UIM client is configured in local mode.

UIMCHECK: serial number entry not yet added to local data base.

UIMCHECK: No local errors

 

CMD : 061313 16:41:00: awsstart devmapA0 --clean
LOG : 061313 16:41:00: AWSSTART:
z1091, version 1-4.45.26.01, build date - 05/24/13 for Linux on RedHat 64bit
LOG : 061313 16:41:00: AWSSTART: Intel-64 architecture
LOG : 061313 16:41:00: AWSSTART: Configuration File-devmapA0
INFO: 061313 16:41:00: STA: AWSSTA204I zPDT started in directory '/home/ibmsys1/z1090/z'.
INFO: 061313 16:41:00: STA: AWSSTA146I Starting independent 1090 instance 'ibmsys1'
CMD : 061313 16:41:00: awsap -p 4224
LOG : 061313 16:41:01: CPU: DEVMAP loaded for EMILY process, RC=159
LOG : 061313 16:41:01: CPU: Creating 3 CPUs
LOG : 061313 16:41:01: CPU: Starting CPUs.
LOG : 061313 16:41:01: CPU: Starting RAS setup
CMD : 061313 16:41:01: sclp_process 0 0 valid
ERR : 061313 16:41:01: EMI: AWSEMI315E zPDTA License Unavailable for CPU 0
ERR : 061313 16:41:01: EMI: AWSEMI315E zPDTA License Unavailable for CPU 1
ERR : 061313 16:41:01: EMI: AWSEMI315E zPDTA License Unavailable for CPU 2
INFO: 061313 16:41:03: EMI: AWSEMI005I Waiting for 1090 license

 

The token used is a zPDT token. The actual RD&T token is in production use, where we are experiencing issues with network traffic and that is being worked on via a PMR. To aid the problem resolution process, this test environment was built and a loaner token from IBM representative is being tried.

Any suggestions what could be done to get AWSSTART to obtain the license?

Toni

  • Knud_Vraa-IBM
    Knud_Vraa-IBM
    1 Post
    ACCEPTED ANSWER

    Re: unable to obtain zPDTA license

    ‏2013-06-13T21:04:18Z  in response to _tony

    Hi Toni.

    Did you run the "z1090instcheck" shell succesfully?

    Knud Vraa

    • salonteu
      salonteu
      2 Posts
      ACCEPTED ANSWER

      Re: unable to obtain zPDTA license

      ‏2013-06-14T06:32:54Z  in response to Knud_Vraa-IBM

      Hi,

      Yes, it goes successfully.

      Teuvo

      This is the answer to the query z1090instcheck

      -bash-4.1$ z1090instcheck

      Checking zPDT prerequisites ....

       For more information about this script, issue : z1090instcheck  -?

       1. REDHAT os level at 6.4 which is
              greater the minimum level                               OK
       2. REDHAT kernel.shmmax of 68719476736 is greater than min.    *NOTE*
              shmmax should be greater than 1.1 times the sum
              of z memory (as specified in your devmap) for
              ALL your 1090 instances.
       3. REDHAT (kernel.shmall * PAGE_SIZE) is 17592186044416
              which is greater/equal to kernel.shmmax which is        OK
       4. REDHAT kernel.msgmni of 7649 is greater than min.   OK
       5. REDHAT kernel.msgmax is 65536 which is                      OK
       6. REDHAT kernel.msgmnb is 65536 which is                      OK
       7. REDHAT net.core.rmem_default is 1048576 which is            OK
       8. REDHAT net.core.rmem_max is 1048576 which is                        OK
       9. REDHAT kernel.core_uses_pid is 1 which is                   OK
      10. REDHAT kernel.core_pattern is core-%e-%p-%t which is                OK
      11. REDHAT ulimit -c is set to unlimited                                OK
      12. REDHAT ulimit -d is set to unlimited                                OK
      13. REDHAT rpm libstdc++-(i686) is installed            OK
      14. REDHAT sntl-sud-7.5.2-0.i386 rpm is greater than required   OK
      15. REDHAT zpdt-shk-server-1.3.1.2-0.i586 rpm is equal to required level        OK
      16. REDHAT dmidecode-2.11-2.el6.x86_64 rpm is greater than required     OK
      17. REDHAT rpm beagle is not installed which is                 OK
      18. REDHAT rpm zmd is not installed which is                    OK


      Running uimcheck ...

      The UIM client is configured in local mode.

      UIMCHECK: serial number entry not yet added to local data base.
      UIMCHECK: No local errors

  • Flems
    Flems
    1 Post
    ACCEPTED ANSWER

    Re: unable to obtain zPDTA license

    ‏2013-06-17T13:27:25Z  in response to _tony

    I know this has been discussed before, but have you tried to rename the uim database files before trying to start AWSSTART? I have seen timing issues etc if you change the token on the server, so try to rename the 2 UIM files before starting AWSSTART.

    They are usually located in /usr/z1090/uim and called :
       uimclient.db

       .uimclient.dk.lock

    /Flemming

  • keithvb
    keithvb
    23 Posts
    ACCEPTED ANSWER

    Re: unable to obtain zPDTA license

    ‏2013-06-17T19:35:35Z  in response to _tony

    Toni,

    There are a number of things that could cause you to be unable to obtain a license.  
    --Are you sure that the token plugged is a RDzD&T token and you are using a z1091 driver ?
    --Verify  the serial number on the token matches was was used to get the update file you obtained from Passport Advantage  
    --The fact that SecureUpateUtility gave you the  "Success!" indicates that the token processes where running but let's check:
    ----issue :   ps -ef  |grep usbdaemon | grep -v grep     and you should see a process running for /opt/safenet_sentinel/common_files/sentinel_usb_daemon/usbdaemon
    ----issue :   ps -ef  |grep Sntl  |grep -v grep                   and  verify you see a process running for ./SntlKeysSrvrlnx
    --Verify that Linux sees the token
    ----issue :   lsusb | grep Rain                   and  verify that a response is returned for "Rainbow Technologies, Inc"
    --As mentioned in the previous post, you could delete the uim files, by issuing  : rm  /usr/z1090/uim/*
    --verify the the default ports are being listen to:
    ----netstat -an | grep 9450 | grep LISTEN                    and verify that port  9450 is LISTEN   mode

    When debugging token issues , I use a simple devmap such as the following to keep the problem simple. It is just a system stanza .
    [system]
    memory 0512m
    expand 256m
    processors 0001
    3270PORT 3270

    You can start up zPDT with this devmap and then provide the output of command : token

    Just curious Did zPDT run successfully on this machine before or it this the first time it is being tried ?
    You could send your results of the above inquiry to z1090@us.ibm.com where we can investigate and provide further assistance .

    Keith

    • _tony
      _tony
      3 Posts
      ACCEPTED ANSWER

      Re: unable to obtain zPDTA license

      ‏2013-06-17T20:39:51Z  in response to keithvb

      Keith

      The token is not a RD&T token. Therefore the license has not been generated in Passport Advantage / License Key Center. It is a zPDT token, so the license was activated via Resourcelink. The reason for this zPDT token is explained in the last paragraph of my opening post.

      Other tests will need to be performed onsite, and I cannot do that right now. We will provide the other results tomorrow.

      Thanks!

      Toni

  • keithvb
    keithvb
    23 Posts
    ACCEPTED ANSWER

    Re: unable to obtain zPDTA license

    ‏2013-06-17T20:58:41Z  in response to _tony

    Toni,

    What is the driver you are using ? ( rpm -qa  |grep z109 )    If it is z1091, you need a z1091 token. You can not run z1091 code with a z1090 token and vise versa ( you can not run z1090 code with a z1091 token) . This was a change to our GA4 code at 45.26.01. This would result in not getting a license.

    Keith

     

     

    • salonteu
      salonteu
      2 Posts
      ACCEPTED ANSWER

      Re: unable to obtain zPDTA license

      ‏2013-06-18T07:27:59Z  in response to keithvb

      rpm query shows z1091:

      rpm -qa  |grep z109

      [root@RDTEST01 ~]#  rpm -qa  |grep z109
      z1091-1-4.45.26.01.x86_64
       

      Updated on 2013-06-18T07:28:17Z at 2013-06-18T07:28:17Z by salonteu
    • _tony
      _tony
      3 Posts
      ACCEPTED ANSWER

      Re: unable to obtain zPDTA license

      ‏2013-06-18T11:14:48Z  in response to keithvb

      Thanks Keith!

      z1091 driver was being used. Now that it was changed to z1090 driver, awsstart works fine.

      Toni