Guest

nGenius Real-Time Monitor

Field Notice: Verisign Certificate Expired November 10 or 11, 2001


Revised November 29, 2001

Revised November 19, 2001

November 15, 2001


Products Affected

Product

nGenius RTM 1.2

nGenius RTM 1.3

Problem Description

There are two similar but separate issues in this field notice.

  1. We are currently seeing an exception occur immediately upon bringing up nGenius on Real-Time Monitor (RTM) version 1.3 because the Verisign certificate that was used to sign the Java archives (jars) in the code expired over the weekend (November 10 or 11, 2001).

    The message box that appears allows the client to choose whether or not to proceed. If the user chooses YES to proceed, then the software successfully uses the expired certificate with no apparent side effects. If the user chooses NO, then the software does not let the user proceed further. So far, all initial testing has shown positive results with all browsers on all platforms except for some mixed results with IE 5.0. Since Cisco requires IE 5.5 or later, this should not be an issue.

    We are preparing a patch that will contain all jars and we will ensure that they are properly signed with the now renewed Verisign certificate.

  2. It has been reported that RTM client versions 1.2 and 1.3 cannot connect to an nGenius Server. When RTM is launched from a client, an error message appears that reads [The nGenius Security Files are missing. Please copy security files (.java.policy & .keystore to the client's HOME directory. Please refer to the release notes for more instructions.]

    If you have Java plugin version 1.3.1 already on the client, you will get an error as documented in the issue noted above. Select YES to proceed normally.

Workaround/Solution

The message box that appears allows the client to choose whether or not to proceed. If the user chooses YES to proceed, the software successfully uses the expired certificate with no apparent side effects. This has been fixed in RTM 1.3 patch 228.

Go to the Software Center (registered customers only) to download these patches.

Note:?This patch requires that nGenius RTM 1.3.0 patch 226 be installed first. The RTM 1.3.0 patches 222 and 223 are no longer required because they are superceded by patches 226 and 228, respectively.

Installation Instructions

UNIX Systems

  1. Close all client browsers.

  2. Stop the nGenius Server using the command .//bin/stop.

  3. Log in as root.

  4. Change to the installation directory with cd.

  5. Untar the patch using the command tar xvf /rtm130-b228-unix.tar.

  6. Execute the RTM patch script while logged in as root using the command ./rtm130p.sh.

  7. Restart the nGenius Server using .//bin/start.

  8. Clear the jar cache on every client system (See Appendix below).

Windows Systems

  1. Close all client browsers.

  2. Stop the nGenius Server by clicking: Start -> Programs -> NetScout nGenius Server -> Stop nGenius Server.

  3. From a command prompt at the patch location (or clicking Start -> Run), execute the rtm130-b228-win.exe file.

  4. Unzip the file into the same directory as the RTM root installation.

  5. Change to the root installation directory using cd.

  6. Execute rtm130p.bat.

  7. For the unzip path, enter the RTM root intstallation directory.

  8. Restart the nGenius Server by clicking Start -> Programs -> NetScout nGenius Server -> Start nGenius Server.

  9. Clear the jar cache on every client system (See Appendix below).

Files Affected

/html/classes/applicationplugins.jar
/html/classes/database.jar
/html/classes/deviceplugins.jar
/html/classes/serviceplugins.jar
/html/classes/sppa.jar
/html/classes/watchdog.jar
/html/classes/frameworks.jar
/html/classes/applet.jar
/html/classes/appscout.jar
/html/classes/images.jar
/html/classes/pa.jar
/html/classes/server.jar
/html/classes/trafficscout.jar
/html/classes/common.jar
/html/help/netscout/Server/Coexist.htm
/html/help/netscout/Server/Error_Message_Reference.htm
/html/help/netscout/Server/Getting_Started.htm
/html/help/netscout/Server/Importing_Devices.htm
/html/help/netscout/Server/Online_Docs.htm
/html/help/netscout/Server/Switch_List.htm
/html/help/netscout/Server/index.html
/html/help/netscout/Server/tindex.html
/html/help/Server/About_User_Accounts.htm
/html/help/Server/User_Accounts.htm

Appendix - To Clear the Jar Cache

Caution: This procedure completely deletes the client cache, VeriSign certificate information, and all cached client jar files. Use caution, especially if you have valuable information in your jar cache.

  1. Close all instances of client browsers.

  2. Go to the user's home directory on the client system.

    • UNIX - $HOME/

    • Windows NT Default - C:\WINNT\Profiles\username

    • Windows 2000 - C:\Documents and Settings\username

  3. Delete the directories .java and java_plugin_AppletStore.

DDTS

To follow the bug ID link below and see detailed bug information, you must be a registered user and you must be logged in.

DDTS

Description

CSCdv85877 (registered customers only)

Verisign Certificate expired November 10 or 11, 2001.

CSCdv86976 (registered customers only)

RTM 1.2 and 1.3 Java Security files missing since Nov. 11, 2001.

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Product Alert Tool - Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.