Quantcast
Channel: Symantec Connect - Products - Articles
Viewing all articles
Browse latest Browse all 818

Steps after installing Data Centre Security 6.7 With DCS AD/sign in fix & Agent installer troubleshooter

$
0
0

Steps after installing Data Centre Security 6.7 With DCS AD/sign in fix & Agent installer troubleshooter

Purpose

The purpose of this article is to help others who have installed DCS 6.7 troubleshoot any issues they may face after installation (The issues are mainly around Sign in issues). Most of the issues are around logging into DCS Manager and DCS Web portal. I have also added a brief section for troubleshooting the Agent install.

DCS Manager 1st steps

After you have installed DCS you will need to install the Java console. Installing this is straight forward, however when you try to log into to the Java console you may not know the username. When you 1st log into to the Java Console you will need to login using the username ‘Symadmin’ as highlighted below

Once you have entered the username you will be asked to set a password. Set this password and keep it safe.

Once you have logged into the Java Console set up a new user by going to ‘Admin’ if you wish to using AD to authenticate users you will need to go to the ‘Settings’ section and then click ‘Add’

a box will pop up on your screen. See image below for steps

Once you have entered in your details be sure to press the ‘Test’ button if the configuration comes back ok press the ‘Ok’ button. You will have now integrated your AD successfully, and if you navigate to users you will be able to assign users from your AD to DCS Manager.

Web portal Sign in

After you have setup your Java Console you should log into the Web portal. The Web portal URL is https://yourservernameorIP:8443/webportal similar you the image below

To log into the Web Portal, you will need to use the username dcsadmin and the password that you supplied during the setup of DCS. Once you have logged in you may want to add AD integration. In order to do this, go to ‘Settings->Integration’ when you arrive at the page you will need to click ‘Add’ to the right of where ‘Active Directory’ is. When you have clicked on Add a box will appear as per the image below

Enter in your Domain Name, Alias, LDAP Path and credentials and press test

For Example.

Domain Name – ABC.com

Domain Name Alias – ABC

LDAP Path – ldap://abc.com:389

Once the test has come back successfully click ‘Add’

You will now see that your domain has been added and should look similar to the image below

Take note of your Domain Name Alias.

Now we have added the AD integration we can now add a user from the AD. Note that once you create an AD user in the DCS Web Portal it will shut off the local dcsadmin account, you will be logged out and required to login using your AD credentials.

To add a user, click on User Management->Users and then click the + sign on the main screen, you should see a screen similar to the one below

Enter the AD username that you want and the assign the user the role of Administrator on the DCS Unified Management Console like the image below

Once you have assigned the Feature and Role, press the ‘Assign’ button. You will now be logged out the System.

Now that you are logged out the Web Portal you can sign in using your AD credentials. To log in you will need to use your Domain Name Alias and not the actual Domain Name, unless they are both the same. In our instance we would use abc\joe.bloggs and not abc.com\joe.bloggs see the image below

If you try to login using abc.com\joe.bloggs you will see an error message saying username and password are incorrect.

If you are using the Domain Name Alias and still unable to log in then please take a look at this article https://www.symantec.com/connect/articles/data-centre-security-dcs-umc-ad-login-failure

These are the 2 main reasons as to why an AD user cannot login to DCS Web Portal.

DCS Agent Install troubleshooting

When installing the DCS agent on a local machine you may come across an issue where it throws up and error like the image below

If this happens then check services and see if you can see the following services listed

If these are listed the do the following:

  1. Reboot your pc
  2. Ensure that the agent-cert.ssl is in c:\temp, if it is not then copy from your DCS server it can be found in the following location C:\Program Files (x86)\Symantec\Data Center Security Server\Server
  3. Run command prompt as administrator and navigate to the directory of where your agent installer is, for example
  4. Run the following command

agent.exe /s /v"MANAGEMENT_SERVER=<Management_Server IP>
AGENT_PORT=PORT_NUMBER SSL_CERT_FILE=C:\temp\agent-cert.ssl
AGENT_SECURITY_GROUP='security group name' -l*v+!
C:\temp\agent-install.log /qn"

  1. Press enter, you will see the error prompt again, press ok and let the installer carry out what it needs to do. At the end of the installation you will see the error again press ok and you will then be required to reboot your pc.
  2. Once you have rebooted your pc go to services and ensure that the DCS services from the earlier image aren’t there.
  3. Once you have confirmed that the services aren’t there then proceed to install the agent as per the installation guide. https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/DOCUMENTATION/9000/DOC9284/en_US/DCSSA_Agent_Guide.pdf?__gda__=1526792367_a730d427838f4789e1b0c2ba9578ecd4

Summary

To summarise what we have gone through, we have taken steps to setup the symadmin user on the DCS Management Server, along with adding AD integration and AD users. We have added AD integration on the DCS Web Portal and looked at how to add AD users, we have also looked at why some people may not be able to log in after adding AD users, and the last step was DCS Agent installer failing. The issues above are some of the issues that I have experience and overcame. I am sure I’m not the only one who has experienced issues of these kinds and not been able to find anything to help overcome these.


Viewing all articles
Browse latest Browse all 818

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>