After upgrading the Gateway from 8.x to 9.x the Policy Manager will not connect and might even crash.

Document ID : KB000044696
Last Modified Date : 14/02/2018
Show Technical Document Details

Issue: 

After upgrading the Gateway from 8.x to 9.0 some customers might have the below issue:

- Policy Manager (v9.) would not connect to the Gateway and will crash.

- Connecting to the Gateway using the web browser will not work.      

Environment:  

CA API MAnagement Gateway 8.x virtual appliance being upgraded to 9.x

As part of the upgrade, users need to also update the Gateway license from v8 to v9 and thus need to connect to the Gateway with either the Policy Manager Client or using a Web Browser.

When they try and do it - they might see the above issue and see the below errors:

ARNING 604 com.l7tech.server.SoapMessageProcessingServlet: Published service message input is not licensed 'The specified feature is not supported on this Gateway: service:HttpMessageInput.'. 

SEVERE 604 org.apache.catalina.core.ContainerBase.[ssg].[myl7gateway.mydomain.com].[/].[SoapMessageProcessingServlet]: Servlet.service() for servlet SoapMessageProcessingServlet threw exception java.lang.NullPointerException 

...

com.l7tech.console.util.AdminContextImpl a WARNING: Exception during remote API call: org.springframework.remoting.RemoteIn vocationFailureException: Invocation of method [public abstract java.util.Collection com.l7tech.gateway.common.security.rbac.RbacAdmin.findAllSecurityZones() throws com.l7tech.objectmodel.FindException] failed in HTTP invoker remote service at [https://securespangateway/ssg/manager/admin]; nested exception is com.l7tech.gateway.common.admin.LicenseRuntimeException: The specified feature is not supported on this Gateway: service:Admin. 

com.l7tech.console.logging.CascadingErrorHandler a SEVERE: The Policy Manager encountered an internal error or misconfiguration and was unable to complete the operation.  

Cause: 

Incompatible license

Resolution:

1) Removed the existing 8.0 license from the ssg database: 

mysql ssg -e "delete from license_document" 

2) Followed the instructions here: https://docops.ca.com/ca-api-gateway/9-0/install-and-configure-the-gateway/auto-provision-a-gateway 

    And then follow the steps from: https://docops.ca.com/ca-api-gateway/9-0/install-and-configure-the-gateway/auto-provision-a-gateway/auto-provision-a-gateway-license

 

Additional Information:

This issue is not a very common one - but can stop production in case the upgrade get stuck on the this.