Control Compliance Suite

 View Only
  • 1.  installation of the console

    Posted Jan 27, 2012 07:11 AM

    On the server CCS console works.

    on another PC I go to http://ccs2/ccs_web. Download and install the client.

    when i run the console An error occurs:



  • 2.  RE: installation of the console

    Posted Jan 27, 2012 11:08 AM

    Hi,

    Please try the following steps it should be able to resolve your issue.

    1) Check whether there is an incorrect entry in the DNS host file for the CCS Application Server.

    2) Ensure that port 1431 is not blocked by firewall or router between the CCS  Apps Server and the CCS console.

    3)

    Cause

    During the installation of the CCS Application Server there is a checkbox to turn on SSL for the Database. If the SSL checkbox is turned on but SSL is not configured & no SSL certificate is created, then the CCS Appserver Console will not launch.


    Solution

    The SSL certificate used for the database connection has expired. To resolve the issue, the following three solutions are presented:

    1) Renew the SSL certificate on the Microsoft SQL Server database hosting the CCS databases.

    or

    2) Run the dn:\Program Files (x86)\Symantec\CCS\Reporting and Analytics\Application Server\Symantec.CSM.ConfigureServiceAccount.exe. The Symantec.CSM.ConfigureServiceAccount.exe will allow you to change to a service account that is not tied to the SSL encryption in the database. Before this can be run, the new Service Account that the product will be changed to, should have identical permissions setup within the Microsoft SQL Server database via Microsoft SQL Server Studio. Simply check the permissions of the current Service Account in Microsoft SQL Server & make the same changes to the new Service Account.

    or

    3) Reinstall CCS & do not use SSL for Microsoft SQL Server configuration.


    4)

    Cause

    This issue is generally caused by the existence of duplicate SPN entries or incorrectly configured SPN entries. Reviewing the SymConsole logs will likely reveal errors similar to the one detailed above.
     
     
    Solution

    Check for duplicate SPN entries either by using the setspn -X command or by using the CCSSPNUTIL.exe utility which is found in the "C:\Program Files\Symantec\CCS\Reporting and Analytics\Application Server" directory. Any duplicate entries should be removed.  Only one SPN configured per Directory service user and Application service user should exist.

    Eg.

    Symantec.CSM.DSS/ccsdir.oaklea.ts

    Symantec.CSM.DSS/ccsdir

    Symantec.CSM.AppServer/ccsapp.oaklea.ts

    Symantec.CSM.AppServer/ccsapp
     

    Let me know how it goes :)



  • 3.  RE: installation of the console

    Posted Jan 30, 2012 02:18 AM

    I found duplicate:

    which of them should be removed?



  • 4.  RE: installation of the console

    Posted Jan 30, 2012 03:13 AM

    PLATFORM VERSION INFO
        Windows            : 6.1.7601.65536 (Win32NT)
        Common Language Runtime    : 4.0.30319.239
        System.Deployment.dll        : 4.0.30319.1 (RTMRel.030319-0100)
        clr.dll            : 4.0.30319.239 (RTMGDR.030319-2300)
        dfdll.dll            : 4.0.30319.1 (RTMRel.030319-0100)
        dfshim.dll            : 4.0.31106.0 (Main.031106-0000)

    SOURCES
        Deployment url            : http://ccs2.stiib.ru/CCS_Web/Console/SymConsole.application

    ERROR SUMMARY
        Below is a summary of the errors, details of these errors are listed later in the log.
        * Activation of http://ccs2.stiib.ru/CCS_Web/Console/SymConsole.application resulted in exception. Following failure messages were detected:
            + Downloading http://ccs2.stiib.ru/CCS_Web/Console/SymConsole.application did not succeed.
            + The remote server returned an error: (401) Unauthorized.

    COMPONENT STORE TRANSACTION FAILURE SUMMARY
        No transaction error was detected.

    WARNINGS
        There were no warnings during this operation.

    OPERATION PROGRESS STATUS
        * [30.01.2012 12:00:29] : Activation of http://ccs2.stiib.ru/CCS_Web/Console/SymConsole.application has started.

    ERROR DETAILS
        Following errors were detected during this operation.
        * [30.01.2012 12:00:29] System.Deployment.Application.DeploymentDownloadException (Unknown subtype)
            - Downloading http://ccs2.stiib.ru/CCS_Web/Console/SymConsole.application did not succeed.
            - Source: System.Deployment
            - Stack trace:
                at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)
                at System.Deployment.Application.SystemNetDownloader.DownloadAllFiles()
                at System.Deployment.Application.FileDownloader.Download(SubscriptionState subState)
                at System.Deployment.Application.DownloadManager.DownloadManifestAsRawFile(Uri& sourceUri, String targetPath, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
                at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestDirectBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options, ServerInformation& serverInformation)
                at System.Deployment.Application.DownloadManager.DownloadDeploymentManifestBypass(SubscriptionStore subStore, Uri& sourceUri, TempFile& tempFile, SubscriptionState& subState, IDownloadNotification notification, DownloadOptions options)
                at System.Deployment.Application.ApplicationActivator.PerformDeploymentActivation(Uri activationUri, Boolean isShortcut, String textualSubId, String deploymentProviderUrlFromExtension, BrowserSettings browserSettings, String& errorPageUrl)
                at System.Deployment.Application.ApplicationActivator.ActivateDeploymentWorker(Object state)
            --- Inner Exception ---
            System.Net.WebException
            - The remote server returned an error: (401) Unauthorized.
            - Source: System
            - Stack trace:
                at System.Net.HttpWebRequest.GetResponse()
                at System.Deployment.Application.SystemNetDownloader.DownloadSingleFile(DownloadQueueItem next)

    COMPONENT STORE TRANSACTION DETAILS
        No transaction information is available.



  • 5.  RE: installation of the console

    Posted Mar 22, 2012 08:34 AM

    Hi,

    Please select the next tab Scan for SPN's. On left pan selec the service account user and you will see the mutiple SPN associated to that account. -- upload the screenshot of SPN created for service account.

    verify that account is allowed for delegation. go to AD users and computers  service account properties and click on Delegation tab, allow the service account for delegation.

    Verify the Delegation for computer account as well.



  • 6.  RE: installation of the console

    Posted Mar 29, 2012 12:31 PM

    Hi,

    I want to know one thing, are you using Symantec Endpoint Protection on the same server?



  • 7.  RE: installation of the console

    Posted Apr 04, 2012 09:14 AM

    @ya4ept: I think you Symantec Application Server Service is not running. To verify go to services.msc and check whether Symantec Application Server Service is running or not. If service is not running then simply start the Symantec Application Server Service and try to launch the CCS Console. Hope it works for you.



  • 8.  RE: installation of the console

    Posted Apr 05, 2012 04:27 AM

    no i do not use Symantec Endpoint Protection