IBM Support

XGS web interface becomes inaccessible and policy deployments fail

Troubleshooting


Problem

Users might find their XGS appliance web interface is inaccessible. They might also see a health warning regarding "SiteProtector policy configuration" in the Health Summary of the appliance in the SiteProtector Console.

Symptom

  • Unable to apply policy changes via SiteProtector or the LMI
  • LMI might eventually stop working
  • Unable to properly restart services via the CLI
  • Status in SiteProtector might change to OFFLINE

Diagnosing The Problem

If you log in via the CLI and use the grep function in 'logs', you are able to see these messages in the system logs:
Error: unable to grab lock after 600 seconds. Another instance is running.
Failed to acquire lock /var/run/mesa_config.commit.lock
The issue is caused by a lock file that gets left behind during the renewal of the built-in self-signed LMI certificate. This issue was fixed in firmware 5.4.0.7 and 5.5.0.2.

Resolving The Problem

To resolve the issue, either restart the appliance or contact IBM Support for a fixpack to clear the lock file.
NOTE: You can normally install the fixpack via the LMI if it has not yet failed.  If the LMI is no longer accessible, the fixpack can be installed via the CLI.  That would require copying the fixpack file to a USB 2.0 thumb drive inserted into the XGS appliance.

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSFSVP","label":"IBM QRadar Network Security"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
06 November 2019

UID

ibm11102851