NNMi 2020.11 installation fails while Create Certificate on Linux

  • KM03774364
  • 01-Feb-2021
  • 04-Mar-2021

Summary

NNMi 2020.11 installation fails while Create Certificate on Linux /opt/OV/bin/nnmkeytool.ovpl RC:143 numStdout:0 numStderr:0

Error

NNMi 2020.11 installation on Linux fails when Create Certificates, it fails with below error:
 

in nnm-install-config.log:

===================

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!  Create selfsigned certificate for keystore /var/opt/OV/shared/nnm/certificates/nnm-key.p12

!!  Create selfsigned certificate for keystore /var/opt/OV/shared/nnm/certificates/nnm-key.p12

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

Friday, January 29, 2021 12:59:50 PM GMT - INFO: The execution directory = /opt/OV/bin

Friday, January 29, 2021 12:59:50 PM GMT - INFO: Waiting (up to 600 seconds) for process to terminate

Friday, January 29, 2021 1:09:50 PM GMT - INFO: thread Thread-83 killing java.lang.UNIXProcess@570e2b28

Friday, January 29, 2021 1:09:50 PM GMT - INFO: Finished running: /opt/OV/bin/nnmkeytool.ovpl RC:143 numStdout:0 numStderr:0 at Fri Jan 29 13:09:50 GMT 2021

 

Friday, January 29, 2021 1:09:50 PM GMT - INFO:

+++++++++++++ no stderr (0 bytes) +++++++++++++

Friday, January 29, 2021 1:09:50 PM GMT - ERROR: Could not execute

StackTrace:

com.hp.ov.nms.installconfig.core.ConfigException: Running:

    1:/opt/OV/bin/nnmkeytool.ovpl

    2:-genkey

    3:-alias

    4:nnm.local.com.selfsigned

    5:-keyalg

    6:rsa

    7:-sigalg

    8:SHA256withRSA

    9:-keysize

    10:2048

    11:-dname

    12:cn=nnm.local.com

    13:-keypass

    14:********

    15:-validity

    16:36500

    17:-keystore

    18:/var/opt/OV/shared/nnm/certificates/nnm-key.p12

    19:-storetype

    20:PKCS12

    21:-storepass

    22:********

TIMED OUT after 600 seconds, returned rc:143

                at com.hp.ov.nms.installconfig.core.Exec.runIt(Exec.java:440)

                at com.hp.ov.nms.installconfig.commonSteps.CreateCertificate.execute(CreateCertificate.java:129)

                at com.hp.ov.nms.installconfig.core.Configurator.executeOneStep(Configurator.java:403)

                at com.hp.ov.nms.installconfig.core.Configurator.logAndRunOneStep(Configurator.java:370)

                at com.hp.ov.nms.installconfig.core.Configurator.runSubsystemConfigSteps(Configurator.java:282)

                at com.hp.ov.nms.installconfig.core.Configurator.execute(Configurator.java:137)

                at com.hp.ov.nms.installconfig.ui.InstallConfigDlg$3.run(InstallConfigDlg.java:463)

 

Friday, January 29, 2021 1:09:50 PM GMT - ERROR: com.hp.ov.nms.installconfig.finalizer.Install error:  Step 2 - CreateCertificate

 

Friday, January 29, 2021 1:09:50 PM GMT - INFO: Subsystem com.hp.ov.nms.installconfig.finalizer.Install - CreateCertificate finished in 682233 milliseconds

Friday, January 29, 2021 1:09:50 PM GMT - INFO: setSubStatus():Step #3/3: Create selfsigned certificate for keystore /var/opt/OV/shared/nnm/certificates/nnm-key.p12 completed (100%)

Friday, January 29, 2021 1:09:50 PM GMT - INFO: setGlobalStatus():com.hp.ov.nms.installconfig.finalizer.Install Configuration Completed (109%)

Friday, January 29, 2021 1:09:50 PM GMT - INFO: setGlobalStatus():Configuring com.hp.ov.nms.installconfig.initializer.Install ... (9%)

========================

 

Cause

Many processes generate certificates, keys, IDs, etc., so they need a random source to avoid generating those assets in a predictable way.

In RHEL there are a couple of special devices that can be used for gathering random numbers for those processes:

    /dev/random
    /dev/urandom

The consensus is that available entropy numbers below 1000 will lead to processes blocking waiting for more entropy.

Fix

1.Install random number generator related utilities

  for example:

#sudo yum install -y rng-tools

2.To enable the rngd service at boot and start the rngd service, perform the following commands:

for example:


# systemctl enable rngd.service
# systemctl start rngd.service


The rngd service will check and feed random data from the hardware device to kernel entropy pool automatically.

3.If you don't want to start the service, you can simply run rngd -r /dev/random as root once

4.continue with installation