How to unsubscribe DH__

Document ID : KB000009801
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Decommisioned DH__ still shows up as a subscriber in sepmd -L DMS__.

sepmd -u DMS__ DH_@<host> does not work returning:

"Failed removing DH__@<host> from Policy Model DMS__Subscriber does not exist."

How to unsubscribe/remove the DH__?

Background:

This is for ControlMinder/PIM 12.8 and above.

 

Prior to 12.8, DH__ and DMS__ communicated directly. They now communicate through the message queue which is why the traditional sepmd -u DMS__ DH_@<host> does not work.

Instructions:

On the server hosting the DMS__:

 

1) Stop ControlMinder/PIM: 

secons -s 

 

2) Delete <AccessControlServer>\APMS\AccessControl\Data\DMS__\0002#DH.status

 

3) Stop the Message Queue e.g. stop the service "CA ControlMinder Message Queue" in Services on windows.

 

4) Edit <AccessControlServer>\MessageQueue\tibco\cfgmgmt\ems\data\routes.conf comment (or delete) out the entire section [<DH__hostname>] section, where <DH__hostname> is the hostname of the DH__ you want to unsubscribe.

 

5) Start the message queue e.g. start the service "CA ControlMinder Message Queue" in Services on windows.

 

6) Start ControlMinder

seosd -start

 

sepmd -L DMS__  should not list the deleted DH__ any longer. 

 

7) Restart ControlMinder/PIM (secons -s, seosd -start) and the message queue on the other DH__ servers to re-register with the DMS. Wait a few seconds and sepmd -L DMS__ should show the required DH__ servers.