IBM Support

CWUPI0013E: A configuration action failed. The failing configuration action is: RedeployManagementConsole.

Troubleshooting


Problem

Install of the Tivoli Federated Identity Manager ( TFIM ) fix pack fails with the latest IBM Update Installer for WebSphere ( UPDI ) on a Windows environment.

Symptom

Visible symptoms in the WebSphere Application Server Network Deployment Admin console ( ISC ) may vary depending which fix pack is being installed and what is the TFIM level prior fix pack installation.

Cause

The way Java handles arguments passed to a application has changed.

The JDK 7u21 Update Release Notes ( https://www.oracle.com/technetwork/java/javase/7u21-relnotes-1932873.html ) states following:

"On Windows platform, the decoding of command strings specified to Runtime.exec(String), Runtime.exec(String,String[]) and Runtime.exec(String,String[],File) methods, has been improved to follow the specification more closely. "

TFIM fix pack installation on a Windows platform is affected starting from UPDI version 7.0.0.31.

Environment

TFIM 6.2.2.x

UPDI 7.0.0.31 -> 7.0.0.xx

Windows OS

Diagnosing The Problem

Review log data about the fix pack install in the <FIM install dir>\logs\update\install directory after the install has finished.

Typically following error is shown in the updatelog.txt after fix pack install fails:

(20-Dec-2017 13:39:10), Install, com.ibm.ws.install.ni.ismp.actions.InstallNIFMaintenance, msg1, Running configuration command: UpdateRuntimeMgmtVersion, percent complete: 47%
(20-Dec-2017 13:39:10), Install, com.ibm.ws.install.ni.ismp.actions.InstallNIFMaintenance, msg1, Running configuration command: VerifyConsoleWasConnection, percent complete: 52%
(20-Dec-2017 13:39:11), Install, com.ibm.ws.install.ni.ismp.actions.InstallNIFMaintenance, msg1, Running configuration command: RedeployManagementConsole, percent complete: 58%
(20-Dec-2017 13:39:43), Install, com.ibm.ws.install.ni.ismp.installtoolkitbridge.ISMPInstallToolkitBridgeForNIFramework, wrn, Config action failed: PublishPlugins - D:\Apps\CBM_ESB\TFIM\FIM\properties\version\nif\config\install\PublishPlugins.ijc
(20-Dec-2017 13:39:43), Install, com.ibm.ws.install.ni.ismp.installtoolkitbridge.ISMPInstallToolkitBridgeForNIFramework, wrn, Config action failed: RedeployManagementConsole - D:\Apps\CBM_ESB\TFIM\FIM\properties\version\nif\config\install\RedeployManagementConsole.ijc
(20-Dec-2017 13:39:43), Install, com.ibm.ws.install.ni.ismp.actions.InstallNIFMaintenance, err, Configuration failed. The config action that failed was: RedeployManagementConsole.
(20-Dec-2017 13:39:43), Install, com.ibm.ws.install.ni.ismp.actions.InstallNIFMaintenance, err, CWUPI0013E: A configuration action failed. The failing configuration action is: RedeployManagementConsole.
(20-Dec-2017 13:39:43), Install, com.ibm.ws.install.ni.ismp.actions.InstallNIFMaintenance, err, com.ibm.ws.install.ni.framework.NIFException: CWUPI0013E: A configuration action failed. The failing configuration action is: RedeployManagementConsole.
    at com.ibm.ws.install.ni.framework.install.NIFPackageApplicationPlugin.runInstallConfigActions(NIFPackageApplicationPlugin.java:805)
    at com.ibm.ws.install.ni.framework.install.NIFPackageApplicationPlugin.execute(NIFPackageApplicationPlugin.java:125)
    at com.ibm.ws.install.ni.framework.satellites.DeploySatellitesPlugin.configureSatellites(DeploySatellitesPlugin.java:254)
    at com.ibm.ws.install.ni.framework.satellites.DeploySatellitesPlugin.execute(DeploySatellitesPlugin.java:166)
...

updateconfig.log shows following messages:

<record>
    <date>2018-10-16T03:52:29</date>
    <millis>1539694349982</millis>
    <sequence>4782</sequence>
    <logger>com.tivoli.am.fim.installer.fixpack.actions.RedeployManagementConsole</logger>
    <level>FINEST</level>
    <class>com.tivoli.am.fim.installer.fixpack.actions.RedeployManagementConsole</class>
    <method>runWsAdminIscDeployComponentScript</method>
    <thread>5</thread>
    <message>Args being passed to wsadmin: -username, wasadmin, -password, ********, -host, localhost, -port, 8879, -conntype, SOAP, -lang, jacl, -c, "$AdminApp update isclite modulefile {-operation add -contents \"C://IBM//WebSphere//AppServer//systemApps//isclite.ear//itfim-fimconsole-e.war\" -contenturi itfim-fimconsole-e.war -usedefaultbindings -contextroot /fimconsole -MapWebModToVH {{.* .* admin_host}}}"</message>
</record>
...
<record>
    <date>2018-10-16T03:52:30</date>
    <millis>1539694350060</millis>
    <sequence>4784</sequence>
    <logger>com.tivoli.am.fim.installer.fixpack.actions.RedeployManagementConsole</logger>
    <level>SEVERE</level>
    <class>com.tivoli.am.fim.installer.fixpack.actions.RedeployManagementConsole</class>
    <method>execute</method>
    <thread>5</thread>
    <message>Unable to redeploy the TFIM console</message>
    <exception>
        <message>java.lang.Exception: java.io.IOException: Cannot run program "C:\IBM\WebSphere\AppServer\profiles\Dmgr01\bin\wsadmin.bat": Argument has embedded quote, use the explicit CMD.EXE call.</message>
        <frame>
            <class>com.tivoli.am.fim.installer.fixpack.actions.RedeployManagementConsole</class>
            <method>runWsAdminIscDeployComponentScript</method>
            <line>298</line>
        </frame>
...

Resolving The Problem

There are two known workarounds for this issue.

Solution 1

  • Install TFIM fix pack using the UPDI version 7.0.0.29. With this option WAS security, if enabled, has to be temporary disabled.
  • Disable security on the WAS Deployment Manager.
  • Make sure changes are synchronized to all runtime nodes. For successful synchronization nodeagents have to be restarted.
  • Restart Deployment Manager.
  • Restart all the runtime nodes.
  • Install fix pack using the UPDI version 7.0.0.29.
  • After successful fix pack installation restore WAS security.

Solution 2

  • Install TFIM fix pack using the latest version of the UPDI. With this option WAS security does not have to be disabled.
  • Install first following packages 6.2.2-TIV-ITFIM-FP00XX-Wssm.pak, 6.2.2-TIV-ITFIM-FP00XX-WebPlugin.pak and 6.2.2-TIV-ITFIM-FP00XX-RBA.pak. Either GUI or command line version of the UPDI can be used. Expect all the packages install without issues. Notice that RBA feature may not be installed on your environment and therefore fix for RBA package is not needed.
Example of selected components to be installed first from the fix pack.
  • After above packages has been successfully installed run UPDI tool again and install 6.2.2-TIV-ITFIM-FP00XX-MgmtConsoleAndMgmtRuntimeSvcs.pak. Again either GUI or command line version of the UPDI can be chosen. This will fail towards end of the package install.
Example of Management Console package failing to install from the fix pack.
  • Use the Windows command line to complete Management Console installation by manually executing previously failed step.
  •   Example:  C:\IBM\WebSphere\AppServer\profiles\Dmgr01\bin\wsadmin.bat -username wasadmin -password <password> -host localhost -port <SOAP port> -conntype SOAP -lang jacl -c "$AdminApp update isclite modulefile {-operation add -contents \"C://IBM//WebSphere//AppServer//systemApps//isclite.ear//itfim-fimconsole-e.war\" -contenturi itfim-fimconsole-e.war -usedefaultbindings -contextroot /fimconsole -MapWebModToVH {{.* .* admin_host}}}"
  • In the above command you need to provide password for the WAS admin userid and the SOAP connector port of the WAS Network Deployment server.
Complete Management Console installation by manually executing missing step from the Windows command line.
  • Remove updateStatus.xml to prevent automatic unistall of the Management Console. Since the Update Installer preserves fix pack installation status in the updateStatus.xml file and because install of the MgmtConsoleAndMgmtRuntimeSvcs package was unsuccessful in the first place, the UPDI tool will try automatically uninstall failed package next time tool is used. Manual step executed from Windows command prompt does not update the updateStatus.xml. Find the updateStatus.xml from the <FIM install dir>\properties\version\nif\backup for example C:\IBM\FIM\properties\version\nif\backup and delete the file.
  • Verify fix pack installation from the WAS ISC.
Verify fix pack installation from the WAS ISC.

Related Information

wsadmin scripting tool syntax

[{"Business Unit":{"code":"BU008","label":"Security"},"Product":{"code":"SSZSXU","label":"Tivoli Federated Identity Manager"},"Component":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"6.2.2.x","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
25 March 2019

UID

ibm10787727

Page Feedback