CA DRAS server is not available for security check

Document ID : KB000004145
Last Modified Date : 29/03/2019
Show Technical Document Details
Issue:

At an attempted logon,users receive the following message:

CA DRAS Server is not available for the security check function. Contact your System Administrator.

Normally, no users will be able to login until System Admin intervention resolves the issue.  

Environment:
CA DRAS, CA CCITCP, CA CCISSL, CA VIEW, CA DISPATCH, CA BUNDL
Cause:

This message is generally caused by one or more of these condtions: 

  • Heap Size is too small (this will be intermittent generally)
  • A failure in the CCI connection to DRAS
  • Incorrect configuration
  • The primary DRAS license server being hung or down
  • A temporary network problem
  • Backleved maintenance
  • Timeouts not set appropriately for usage
Resolution:

If this was previously working and is intermittent or results are unpredictable:
Users are seeing this from time to time.



If this is the first time you are bringing up Web Viewer:

  • Make sure that you have the 4Q LMPKEY applied on the LPAR where the DRAS is running.  The primary DRAS is you one that was selected during configuration with the configtool.  If you have questions about this, contact CA Support for more information.

  • Rerun the configtool and select system configuration, followed by CCI.  Fill in the values, or accept the ones that you already entered and test.
    This will verify the CCITCP or CCISSL is up and running.  If correct, Save.

  • Check your WVProfile.properties in the config subdirectory under your install directory for the DRAS parameters to verify that they are correct:

    • LICENSE.SystemID= The name of the LPAR where the DRAS license server is running.

    • LICENSE.DRASServer=   The name of the DRAS server.  You can find it in the DRAS log, for example: Server ID          = DRASSVR 

If they are not correct, rerun the configtool and after selecting system configuration, select DRAS to do discovery. When the discovery comes back with a list,
select the number of the server that you want.  Do not select "No Change".

If this was previously working:

  1. Retry the connection attempt to assure the issue was not a temporary network condition
  2. Rerun the configtool and select system configuration, followed by CCI.  Fill in the values, or accept the ones that you already entered and test.
    This will verify the CCITCP or CCISSL is up and running.  If correct, Save.
  3. Otherwise, recycle DRAS.  If this resolves the problem, do NOT recycle Web Viewer.  Make a note that this is what restored functionality
  4. If reycyling DRAS does not resolved the problem recycle Web Viewer using Tomcat or Websphere.
  5. Make sure you have the latest build - SO01856 CUMULATIVE BUILD 185 FOR WEB VIEWER 12.1 or higher FOR V12.1 This has updated CCI logic for better recovery in the event of a broken connection plus added error logging.
  6. Follow these instructions to increase the idle timeout value for CCI:
    KB000044437 How to Increase idle timeout value with CA CCISSL and CCITCP
  7. Apply CCIMVS 14.1 APAR RO54318 CAS9694W - CAICCI INSUFFICIENT STORAGE FOR PSN and CCIMVS 14.1 APAR RO97199 CCI HANG IN SEND TO PC (with pre reqs)
  8. If you still have problems, please setup CCI client side logging as follows and contact CA Support

a.   Edit OmCCITrace.cfg, in your <CAOMWV12_HOME>/config folder and find the line:  

      log4j.category.com.ca.erm.cciclient.cci.CCISocket=ERROR, A1

c.   Replace the line with:

      log4j.category.com.ca.erm.cciclient=ERROR, A1

d. Edit OmJDrasTrace.cfg and add this statement at the bottom

    log4j.logger.com.ca.omgmt.drascci.cci.OmCCIConnectionManager=DEBUG 
    

 

e. Wait three minutes for CA OM Web Viewer to get the updated logging settings

3.   Attempt to reconnect

4.   Your logs with be in <CAOMWV12_HOME>/logs

 

 

 

Additional Information:
Please contact CA Support if you are still having the problem.