Guest

Cisco Secure Access Control Server for Windows

ACS Troubleshooting

Document ID: 99449



Contents

Introduction
Prerequisites
      Requirements
      Components Used
      Conventions
Problem: ACS 1113 SE - Unable to Assign Static IP Address
      Solution
Problem: ACS Folder is Locked by Another Application
      Solution 1
      Solution 2
Problem: Event Error
      Solution
NetPro Discussion Forums - Featured Conversations
Related Information

Introduction

This document describes how to troubleshoot ACS and resolve error messages, such as ACS Folder is Locked by Another Application and At least one service or driver failed during startup. use event viewer to examine the event log for details.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

The information in this document is based on the Cisco Secure Access Control Server (ACS) version 3.3 and later.

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Problem: ACS 1113 SE - Unable to Assign Static IP Address

Unable to configure the static ip address on ACS 1113 SE.

Solution

In order to resolve this issue, install the applACS-4.1-set-ip-CSCsm73656-Patch.zip patch, which is available from Cisco Downloads ( registered customers only) . The patch suits all ACS SE 4.1 versions.

Problem: ACS Folder is Locked by Another Application

The ACS Folder is Locked by Another Application error message appears during an ACS software upgrade, such as the upgrade from version 3.3 to 4.0

Use these solutions in order to solve the problem.

Solution 1

Complete these steps:

  1. In the ACS Window, check the System Configuration > Service Control > Check the Manage Directory check box.

  2. Enter a value, such as 3, in the Keep only the last __ files box.

  3. Restart. The upgrade is likely to work.

    acsfolder_error-1.gif

Solution 2

If Solution 1 does not resolve the issue, complete these steps:

  1. Backup the current ACS database.

    Refer to the Cisco Secure ACS Backup section of User Guide for Cisco Secure ACS for Windows Server for more information on how to perform the backup of the ACS database.

  2. Run the clean.exe file in order to uninstall ACS 3.3 (or your existing version). This file is located on the CD under ACS Utlities/support/clean.

  3. Reinstall ACS 3.3 from the CD.

  4. Restore your database from the file that you saved in Step 1.

    Refer to the Cisco Secure ACS System Restore section of User Guide for Cisco Secure ACS for Windows Server for more information on how to restore the ACS database.

  5. Upgrade the ACS to version 4.0.

    Refer to Installation Guide for Cisco Secure ACS for Windows Server Version 4.0 for more information on upgrade procedures.

Problem: Event Error

During startup, the ACS SE receives the At least one service or driver failed during startup. use event viewer to examine the event log for details error message.

Solution

This error on the ACS SE does not affect any of the ACS functionalities. It is a Microsoft Windows error. This error appears because the monitor, mouse and keyboard cannot be used on the appliance and are disabled by default.

The ACS appliance is a hardened, locked-down system and is designed with security in mind. The appliance uses windows strengthen image, which has all redundant services and connections stopped. It is made to keep all viruses, worms, and DDOS attackers out. Hence there is no VNC, DOS prompt, or any other way to reach the windows configuration. Services like the mouse, keyboard and monitor are closed.

On rare occasions, it indicates that something is corrupted on the appliance image. If you re-image the appliance, it fixes the issue in the majority of instances. You can try to re-image the ACS as well.

NetPro Discussion Forums - Featured Conversations

Networking Professionals Connection is a forum for networking professionals to share questions, suggestions, and information about networking solutions, products, and technologies. The featured links are some of the most recent conversations available in this technology.
NetPro Discussion Forums - Featured Conversations for Security
Security: Intrusion Detection [Systems]
Security: AAA
Security: General
Security: Firewalling

Related Information



Updated: Apr 16, 2008Document ID: 99449