IBM Support

How to solve the integration app failure with expired API key

How To


Summary

This article provides the steps when the integration or app host failed after the API key expired

Objective

This article provides the steps when the integration or app host failed after the API key expired.

Environment

V43+ above.

Steps

-Check whether there is any  IP ban for the integration server or App host IP address
From version 43, SOAR has the feature to manage the blocked IP  with the "sysadmin" account.
  1. Set the user account as a system account:
sudo resutil newuser -email "xxx" -org "xx" -sysadmin
2. Log in web UI System Setting to check the Blocked IP tab to see whether there is any IP blocked.
image-20220303163829-1
If so,
3. If using Integration server,  run
sudo systemctl stop resilient-circuits.service

Or  undeploy all app installed in App host.

4.  Unblock the IP.
5. Regenerate one or more expired API keys from within the SOAR web UI
6. Update the app.config for all the Apps.
7. For Integration server, run
​sudo systemctl start resilient-circuits.service
Or
Redeploy all the apps in the App host.

Related Information

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cvqKAAQ","label":"Integrations"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"44.0.0"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEGM63","label":"IBM Security QRadar SOAR on Cloud"},"ARM Category":[{"code":"a8m0z000000cvuvAAA","label":"Integrations-\u003EAPI"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEGM63","label":"IBM Security QRadar SOAR on Cloud"},"ARM Category":[{"code":"a8m0z0000001gyGAAQ","label":"Integrations-\u003EQRadar app"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
15 August 2022

UID

ibm16560937