topic Problem distributing certificates to rim node in Management & Governance

Problem distributing certificates to rim node

dferreirogft — Fri, 15 Nov 2024 23:37:28 GMT

Hi.

We're trying to configure a rim node on a qliksense server following the tutorials found but we are stuck in one of the steps.

We succesfully installed the qliksense server on the rim server. Once installed, we took a look to the Repository logs and says:

Starting certificate password verification webservice...

Setup service initialized with 2 available methods

Took a look into the proxy logs also and no errors nor warnings.

When we go to the central node and try to add the rim node we get the following error:

We searched all the topics in the community but no solution worked for this problem.

We opened the following ports in both slave and master servers and still don't work:

Can anyone give us an advice?

Thanks in advance.

Re: Problem distributing certificates to rim node

sorrakis01 — Thu, 14 Oct 2021 11:33:25 GMT

Hi,

I'm interested too, anyone can help us?

Thanks

Re: Problem distributing certificates to rim node

sorrakis01 — Thu, 14 Oct 2021 15:06:56 GMT

Come on community any idea? 😅

Thanks Best Wishes

Re: Problem distributing certificates to rim node

Maria_Halley — Fri, 15 Oct 2021 07:52:24 GMT

Can you check with the utility tool so that all ports are open.

https://community.qlik.com/t5/Knowledge/Qlik-Sense-Utility-Functions-and-Features/ta-p/1711747

Re: Problem distributing certificates to rim node

BILeadtech — Fri, 15 Oct 2021 09:30:41 GMT

Hi.

I cannot see where in the tool I can check for the opened ports:

Re: Problem distributing certificates to rim node

Maria_Halley — Fri, 15 Oct 2021 09:56:33 GMT

If you connect to the db and choose connection checker, Does that not check ports (I can't log in right now and check)

Re: Problem distributing certificates to rim node

BILeadtech — Fri, 15 Oct 2021 10:10:04 GMT

you are right. We checked and we have a loot of ports saying : "could not establish connection because the host actively refused". Witch could be the problem?

Re: Problem distributing certificates to rim node

Sooraj_Suresh — Sat, 16 Oct 2021 10:41:31 GMT

@BILeadtech @dferreirogft

Please make sure central node and RIM node are reachable from both sides using ping.

Then check if the RIM node is able to connect to database and also make sure the ports 4444(QRS certificate) and 4432(QRD)- inboundfrom RIM node are listening.

Make sure if the firewall is running then either disable it or add exceptions to the ports in firewall. You can refer to the ports used in communication in the below link under "Minimum ports used for communication in multi-node sites"

(https://help.qlik.com/en-US/sense-admin/August2021/Subsystems/DeployAdministerQSE/Content/Sense_DeployAdminister/QSEoW/Deploy_QSEoW/Ports.htm)

Best Regards

Sooraj Suresh

Re: Problem distributing certificates to rim node

BILeadtech — Mon, 18 Oct 2021 05:09:23 GMT

Hi, Both sites are reachable thought ping. The port 4444 is listening but 4432 is not. Which service makes port 4432 listen?

Re: Problem distributing certificates to rim node

BILeadtech — Mon, 18 Oct 2021 05:18:15 GMT

On the other hand, when I configure the rim node on the central node and I get the error. I tried to access the URL the server sais cannot access and I can reach it, but with some kind of an error:

Re: Problem distributing certificates to rim node

Sooraj_Suresh — Mon, 18 Oct 2021 05:19:00 GMT

Hello please make sure port 4432 is listening as it's used to connect to repository database.

Make sure the port 4444 is listening on RIM node then the certificate distribution will be successful.

If there is a firewall please turn of it and try the certificate distribution.

Re: Problem distributing certificates to rim node

Sooraj_Suresh — Mon, 18 Oct 2021 05:21:10 GMT

I see that you are opening the URL so is that URL being accessed from RIM node browser?? And also instead of IP please try with the hostname or FQDN.

Re: Problem distributing certificates to rim node

BILeadtech — Mon, 18 Oct 2021 05:43:56 GMT

Hi, No, the url opened is opened on the central node.

The port 4443 should be listening on the central node right? As it is the RIM node who connects to the central one.

If so, the port is actively listen:

On the other hand, when installing the RIM node and configure the repository of the central node in there, no error is being reported. But when the installation ends and I check the repository lisgs on the RIM node I see messages like this:

Re: Problem distributing certificates to rim node

Sooraj_Suresh — Mon, 18 Oct 2021 06:03:42 GMT

Hello,

Once the RIM node has been added in QMC under nodes then select to distribute certificates to RIM node it will show a dialog box with URL and password.

You need to enter the URL in RIM node and then Enter the password for successful node registration.

Also port 4444 and 4432 should be listening on RIM node aswell.

Re: Problem distributing certificates to rim node

BILeadtech — Mon, 18 Oct 2021 06:09:51 GMT

Yes, is in this step where I find the error shared.

Tried to reinstall the RIM node and in a fresh install without errors the port 4444 si listening while 4432 is not. Do you knwo what could be the cause?