Symantec Access Management

Hello,

We have an issue on our SM environment. We have an policy with more than 70 resources. When we add resources the WAM UI is crashing and if not every operation took long time!

We are using version 12.5.1 CR06 for the WAM UI and for the Policy server and using CA Directory.

Someone see this behavior on his environment?

Thanks

Nir

Questions :

• What is your policy store ?
• Does the PS and Admin UI version match ?
• Has PS been recently upgraded ? If it is, have you run xpsddinstall SmMaster.xdd  and imported the SmPolicy.xml ?
• What is the Operating System.
• Also please share the , error from server.log at the time of the issue

Hello Shreshta,

• What is your policy store ?  [NIR] CA Policy store and WAM UI is 12.51 SP6 on windows 2008 R2
• Does the PS and Admin UI version match ? [NIR] Yes
• Has PS been recently upgraded ? If it is, have you run xpsddinstall SmMaster.xdd  and imported the SmPolicy.xml ?  [NIR] yes.. after the upgrade the issue is started and I didn't run xpsddinstall SmMaster.xdd - what is it?
• What is the Operating System.  [NIR] windows 2008 R2
• Also please share the , error from server.log at the time of the issue  [NIR] I don't have them on my laptop right now

Thank you!

Nir

Please try following :

Import the Policy Store Data Definitions

Importing the policy store data definitions defines the types of objects that can be created and stored in the policy store.

Follow these steps:

1. Open a command window and navigate to siteminder_home\xps\dd.
   • siteminder_home
     Specifies the Policy Server installation path.
2. Run the following command:
   • XPSDDInstall
     Imports the required data definitions.

Import the Default Policy Store Objects

Importing the default policy store objects configures the policy store for use with the Administrative UI and the Policy Server.

Consider the following items:

• Be sure that you have write access to siteminer_home\bin. The import utility requires this permission to import the policy store objects.
  • siteminder_home
    Specifies the Policy Server installation path.
• Before running a CA Single Sign-On utility or executable on Windows Server 2008, open the command line window with administrator permissions. Open the command line window this way, even if your account has administrator privileges. For more information, see the release notes for your CA Single Sign-On component.

Follow these steps:

1. Open a command window and navigate to siteminder_home\db.
2. Import one of the following files:
   • To import smpolicy.xml, run the following command:
   • To import smpolicy–secure.xml, run the following command:
   Note: You use either file to configure a new policy store and upgrade an existing store. When imported as part of an upgrade, the file does not overwrite existing default objects that were modified. Both files include the default policy store objects. These objects include the default security settings in the default Agent Configuration Object (ACO) templates. The secure file provides more restrictive security settings.
   The default policy store objects are imported.
   • –npass
     Specifies that no passphrase is required. The default policy store objects do not contain encrypted data.

Run the XPS Sweeper Utility

If you managed your Federation Security Services (legacy federation) objects using the FSS Administrative UI, run the XPS sweeper utility (XPSSweeper) to complete the migration of these objects.Follow these steps:

1. Log in to the Policy Server host system.
2. Run the following command to make available your legacy federation objects to the Administrative UI:

Restart all Policy Servers

Restarting all Policy Servers that are communicating with the policy store completes the policy store upgrade.

Restart Admin UI

How to Upgrade an r12.x Policy Store - CA Single Sign-On - 12.52 SP1 - CA Technologies Documentation

If this still doesn't work please share :

server.log and policy server trace logs for troubleshooting.