IT43369: LOGGING ON TO THE ADMINISTRATIVE CONSOLE SHOWS ERROR 'THIS SITE CAN'T BE REACHED'

APAR status

• Closed as program error.

Error description

• When trying to access the IBM Spectrum Protect Plus
  administrative console via port 8090 by
  using "http://<SPP_HOSTNAME>:8090"> the browser window shows
  following messages:
    This site can't be reached
    <SPP IP Address> refuses to connect
    Try:
       - Checking the connection
       - Checking the proxy and firewall
         ERR_CONNECTION_REFUSED
  
  That is due to inactive service for 'adminconsole'. When
  starting that service manually by using command
  <sudo systemctl start adminconsole> the activation failed due to
  insufficient permissions on files:
   -> 'ecx-beta.key' and  'ecx-beta.crt'
  
  When running command ...
    >ls -la /opt/virgo/configuration
  ... from the IBM Spectrum Protect Plus command line it shows:
    -rw-------.  1 root  root  3272 <date/time> /.../ecx-beta.key
    -rw-r--r--.  1 root  root  2021 <date/time> /.../ecx-beta.crt
  
  
  The permissions on these files can be changed when running
  procedure for re-generating the SSL certificate as described at
  document:
  https://www.ibm.com/docs/en/spp/10.1.13?topic=tasks-regeneratin
  g-secure-sockets-layer-ssl-certificate
  
  
  
  IBM Spectrum Protect Plus Versions Affected:
  IBM Spectrum Protect Plus 10.1.13
  |MDVREGR 10.1.13.0 5737SPLUS|
  

Local fix

• Use following commands to correct the permissions:
   cd /opt/virgo/configuration
   sudo chmod 755 ecx-beta.key
   sudo chmod 755 ecx-beta.crt
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum Protect Plus level 10.1.13 and 10.1.14          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * see ERROR Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply the fixing level when available. This problem is fixed *
  * in IBM Spectrum Protect Plus level 10.1.15.  Note that this  *
  * is subject to change at the discretion of IBM.               *
  ****************************************************************
  

Problem conclusion

• In previous versions of IBM Spectrum Protect Plus, the
  generate_default_cert script would install the desired
  certificate, but the certificate would lack the execute and
  write file system permissions that are required for IBM Spectrum
  Protect Plus to consume the certificate properly.
  The generate_default_cert script has been updated to apply the
  required file system permissions to the generated certificate so
  that the certificate can be consumed properly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• Platform Other
  

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels