Workload Security Agent not connected due to expired certificate
- Views:
- 162
- Visibility:
- Public
- Votes:
- 0
- Category:
- data-infrastructure-insights
- Specialty:
- cloud
- Last Updated:
- 11/26/2024, 11:57:23 AM
Applies to
- Data Infrastructure Insights (DII) (formerly Cloud Insights) Services
- Software Workload Security (SWS)
Issue
- Workload security agent showing status "
Not Connected
" - The agent service is not running inside the host VM
- when restarted, fails again after a few moments
agent.log
:
[INFO] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-AcqAuthenticationKeyGenerator] - Certificate signing request is created successfully.
[ERROR] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-CommunicationManager] - Received status code 401 and status response [] for the request POST:/rest/v1/agents/cert
[ERROR] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-CommunicationManager] - Certificate request failed, reason: Sign Agent certificate request failed. Failed to login: cannot find Authorization header
[INFO] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-AcqAuthenticationKeyGenerator] - Restoring agent certs from /opt/netapp/cloudsecure/agent-certs/acqkeys_backup
[ERROR] [prod] [3d532211-f783-44fb-805a-233ca946bdea] [22f222a8-3120-47d6-a726-b4a8010c34a8] [agent-ActorSystemImpl] - Failed to configure agent. Reason: Certificate request failed, reason: Sign Agent certificate request failed. Failed to login: cannot find Authorization header}}