ASA5510 - Common Criteria EAL4 configuration

Hello,
I'm trying to track down the installation and configuration procedures for the common criteria EAL4 evaluated ASA5510 but not having any joy.
The ASA Release 8.3.2 certification report (http://www.commoncriteriaportal.org/files/epfiles/st_vid10381-vr.pdf , Page 18) identifies the required configuration documentation as the "Cisco Adaptive Security Appliances (ASA) Firewall and Virtual Private Network (VPN) Platform Common Criteria Operational User Guidance and Preparative Procedures" but I can not find any reference to this on the Cisco web site.
So far I've only been able to locate the proceedures for the older 7.0 release. http://www.cisco.com/en/US/docs/security/asa/asa70/hw/eal4/asaeal4.html
Grateful if anyone is able to help locate the correct documentation needed to configure an ASA5510 to achieve the common criteria EAL4 evaluated configuration.
Many thanks,
Dominic

what you need is: Cisco Adaptive Security Appliance (ASA) Firewall & Virtual Private Network (VPN) Platform Preparative Procedures & Operational User Guide Version 0.8 April 2011 This document describes how to install and configure the Cisco ASA 5500 Series Adaptive Security Appliance (ASA) running software version 8.3.2 as certified by Common Criteria Evaluation Assurance Level 4 (EAL4). i got a pdf from Ashit Vora, Cisco Systems, Inc., Cisco Global Certifications Team – Manager, FIPS/CC eliot robinson sterling national bank [email protected]

Similar Messages

Oracle 9i - Common Criteria Evaluated Configuration

I see Oracle9i (9.2.0.1.0) has successfully completed evaluation (http://www.cesg.gov.uk/site/iacs/index.cfm?menuSelected=1&displayPage=152&id=269). Oracle have missed a trick as their evaluated edition page does not show this yet.
The security target and certification reports both refer to "Evaluated Configuration Document for Oracle9i Release 9.2.0, Oracle Corporation" to be read inconjunction with the reports. Is this document available for download? I cannot find it in the Documentation repository. Any help in obtaining this would be most appreciated.
Regards,
Kevin Sloan
Rural Payments Agency
United Kingdom

what you need is: Cisco Adaptive Security Appliance (ASA) Firewall & Virtual Private Network (VPN) Platform Preparative Procedures & Operational User Guide Version 0.8 April 2011 This document describes how to install and configure the Cisco ASA 5500 Series Adaptive Security Appliance (ASA) running software version 8.3.2 as certified by Common Criteria Evaluation Assurance Level 4 (EAL4). i got a pdf from Ashit Vora, Cisco Systems, Inc., Cisco Global Certifications Team – Manager, FIPS/CC eliot robinson sterling national bank [email protected]

Common Criteria and 10.5

Apple's Common Criteria Tools (see http://www.apple.com/support/security/commoncriteria/) do not work under 10.5. Loading the 10.4 tools under 10.5 causes the system to be unbootable, requiring a system re-install.
Does anyone know if/when the 10.5 Common Criteria Toolset will be available?
FYI, these tools are security related.
Thanks

Apple's Common Criteria Tools (see http://www.apple.com/support/security/commoncriteria/) do not work under 10.5. Loading the 10.4 tools under 10.5 causes the system to be unbootable, requiring a system re-install.
Does anyone know if/when the 10.5 Common Criteria Toolset will be available?
FYI, these tools are security related.
Thanks

[Forum FAQ]How to troubleshoot common issue when configuring user device affinity from usage data

Symptom:
Some clients might fail to automatically configure user device affinity from usage data if you have manually configured user device affinity before.
When you check the UserAffinity.log, you can find the similar error messages as below:
User 'XXXXX\XXXXX' has xxxxx usage minutes UserAffinity
Setting auto affinity for user 'XXXXX\XXXXX'. UserAffinity
Found same state message existing. (was sent before) Skip sending same state message for user 'XXXXX\XXXXX'.. UserAffinity
Figure 1. Error Message in UserAffinity.log
Cause:
As the log said, there is a user affinity state message existing in WMI which prevents client from sending new user affinity state message.
Resolution:
We can delete the user affinity state message in WMI to force the client to resend the user affinity state message.
We can follow the steps below:
1. Run Windows Management Instrumentation Tester (“Wbemtest”).
2. In Windows Management Instrumentation Tester dialog box, click “Connect”.(Figure 2)
Figure 2.
3. Type “root\ccm\statemsg” under the Namespace table and then click “Connect”.(Figure 3)
Figure 3.
4. Click “Enum Classes”. (Figure 4)
Figure 4.
5. Choose “Recursive”
in Superclass Info dialog box.(Figure 5)
Figure 5.
6. Double-click “CCM_StateMsg” in Query Result dialog box.(Figure 6)
Figure 6.
7. Click “Instances”
in Object editor for CCM_StateMsg dialog box. (Figure 7)
Figure 7.
8. Choose the messages that contain "domain/user_Auto" and click “Delete” in the Query Result dialog box.(Figure 8)
Figure 8.
After you delete user affinity state message in WMI, the user affinity state message for the user will be resent. After a period time, we can check the UserAffinity.log to
see if the user affinity state message has been successfully sent. The related information would be similar as below:
Successfully sent user affinity state message for user 'xxxxx\xxxxx'.
Successfully created pending user affinity for user 'xxxxx\xxxxx' into WMI.
Figure 9.
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

I'm not sure whether this is the appropriate place to add this but - a (possible) cause that I have seen which is not mentioned above is a request for an AAAA record (IPv6 address)
being responded to with an A record (IPv4 address).
DNS debug logging (Windows 2008 R2 SP1) captured requests to
192.225.156.200 and the corresponding responses. In each case the response was followed in the debug log by the event “The DNS server encountered an invalid domain name
in a packet from 192.225.156.200. The packet will be rejected. The event data contains the DNS packet.”
The domain name in the response was the same as that in the query, and looks OK.
The logged query shows an AAAA record (IPv6 address) request and the logged response returned an A record (IPv4 address).
http://www.rfc-editor.org/rfc/rfc4074.txt “Common
Misbehavior Against DNS Queries for IPv6 Addresses” says, under “Expected Behavior”:
   Suppose that an authoritative server has an A RR but has no AAAA RR
   for a host name. Then, the server should return a response to a
   query for an AAAA RR of the name with the response code (RCODE) being
   0 (indicating no error) and with an empty answer section (see
   Sections 4.3.2 and 6.2.4 of [1]). Such a response indicates that
   there is at least one RR of a different type than AAAA for the
   queried name, and the stub resolver can then look for A RRs.

Common lib jar configuration for fusion web project

Hi,
I have one common lib jar file which contains webservice proxy client.
I have multiple fusion web projects which contain bounded taskflows. These projects are exposed as ADF lib jars and used in webcenter pages.
Each fusion web projects contains model project and which defines one java class as application module. The application module calls webservice proxy client for supplying data to UI layer.
I am looking for clarification on adding common lib jar to fusion webprojects. Do I need to add common lib jar file for both model and viewcontroller project? Is there any way to add at fusion web application level so that both model and view controller projects can refer the lib jar and also for Webcenter application if I add this taskflow as region to the page.

Hi,
Do I need to add common lib jar file for both model and viewcontroller project?
This really depends on your architecture. If for example the ADF model you reference in the view layer project is from an ADF Library too then the view layer project needs to have all the library references. If the view layer project is in a workspace with a model project and the model project is the client of the service then the common jar files need to go into the model layer.
and also for Webcenter application if I add this taskflow as region to the page.
If you use it in a region then the problem is that ADF libraries don't hold 3rd party JAR references, which means you need to provide the library to the consuming application of the task flow. You can try configuring the JAR file in the EAR file you deploy with your consuming application and see if this is enough. Otherwise you can try a shared WLS library deployment
Frank

Common transport directory configuration

Dear Gurus,
I installed ECC6.0 sr3 (dev and quality on the same server) windows 2003. Production server on seperate server. Now I want to configure common transport directory.
For dev and qas using same transport directory beacuse they are in the same server.
But production server is having seperate transport directory.
Is it compulsory having the common tranport directory.
Can Any body give the steps to add the production server in the same tranport directory.
Regards
Rao.

Is it compulsory having the common tranport directory.
No, it is not compulsory.
You can use STMS tcode to configure the same.
For further information, please go through the below link:
[Transport Management System|http://help.sap.com/saphelp_erp60_sp/helpdata/EN/44/b4a0137acc11d1899e0000e829fbbd/frameset.htm]
Regards,
Faisal

How is Common Phone Profile configured in CME (or CLI)?

Hello everyone.
I have 8945 phones configured using SIP, and when attempting to access the Phone administrative menu, it prompts for a password. Unfortunately, I have no idea what the admin password is. 'cisco' doesn't work. Neither does 'secret'.
Research indicates this can be configured in the Common Phone profile, but it always mentioned CUCM. How can this be done with CME? Or, does it need done via CLI?
Does anyone have an idea regarding what the 8945 default admin password is, or how I can set (reset) using CME/CLI?
Thanks in advance for any assistance you can provide.
Regards,
Jim

was this phone used earlier on CUCM, and have you moved this from CUCM to CME now?
if this is the cause you need to plug this phone back to CUCM and reset the password/remove common profile of this Phone from CUCM, you can't reset this old password from CME now.
other than that you can restore the phone to factory default in order to make the password none<blank> and use further on CME.
Br,
Nadeem Ahmed

Is it possible to add more criteria when configuring smart collections?

Looking to build a smart collection with the following criteria:
Average number of colours greater than 1000 (to filter out B/W & grayscale images)
Minimum # pixels in image (to filter out small images)
Aspect ratio is within 20% of 16:9 (to filter out images that won't look good on HD dispaly)
Less than 35% similar to any other image (to filter out duplicates)
Possible?

It's possible to add more criteria by clicking the plus symbol to the right but not to the extent of the complexity you require. The nearest you could get (click image below) would perhaps provide a starting point but you would need some manual intervention, at least for duplicates.

EKM using the Azure Key Vault is now available for SQL Database and SQL Server running in Azure VM's

In preview today, you can create keys in the Azure Key Vault, and use them with Azure SQL Database, or SQL Server running in a Azure VM. Use the Extensible Key Management (EKM) for TDE, backup encryption, or cell level encryption. For more information, see
Extensible Key Management Using Azure Key Vault (SQL Server)
http://msdn.microsoft.com/en-us/library/dn198405.aspx.
The announcement:
Azure Key Vault in public preview
Key Vault offers an easy, cost-effective way to safeguard keys and other sensitive data used by cloud applications and services. Included are the following features:
Enhance data protection and compliance:
Protect cryptographic keys and sensitive data like passwords with keys stored in Hardware Security Modules (HSMs). For added assurance, import or generate your keys in HSMs certified to FIPS 140-2 level 2 and Common Criteria EAL4 standards,
so that keys stay within the HSM boundary. Key Vault is designed so that Microsoft doesn’t see or extract your keys.
All the control, none of the work:
Provision new vaults and keys in minutes and centrally manage keys, sensitive data, and policies. You maintain control over your encrypted data—simply grant permission for your own and third-party applications to use keys as needed. Enable
developers to easily manage keys used for dev/test and migrate seamlessly to production keys managed by security operations.
Boost performance and achieve global scale: Improve
performance and reduce latency of cloud applications by storing cryptographic keys in the cloud (versus on-premises). Key Vault rapidly scales to meet the cryptographic needs of your cloud applications and match peak demand.
Get started with Azure Key Vault by creating keys for applications you develop,
SQL Server encryption (TDE, CLE, and Backup), and partner solutions like
CloudLink SecureVM.
Key Vault is available now at no charge with discounted preview pricing starting on January 15, 2015.
For more information, please visit the
Key Vault webpage. For a comprehensive look at pricing, please visit the
Key Vault Pricing webpage.
Rick Byham, Microsoft, SQL Server Books Online, Implies no warranty

Thank you for sharing this Rick.
Regards,
Alberto Morillo
SQLCoffee.com

How to apply common View criteria for all LOV View programatically?

Hi,
In my application I use nearly 100 VOs, which will be mapped as LOV to some base VOs. These VOs are not only for LOV but also will be used directly in screen as read-only table. All these VOs contains EFF_BGN_DTand EFF_END_DT. Requirement is to display only the active records in VO.
We don't want to crete view criteria at design time for each and every VO. Instead we want to have a base ViewObjectImpl class, create at runtime and add this common criteria with the existing view criterias (If any given, which are actually required for the developer for screen specific functionality).
NOTE: As all of our VOs are custom java data source implemented and none of them have queries, we cannot use whereclause API but only ViewCriteria.
We want to create a view criteria, that somewhat looks like the below condition.
 ( (TO_CHAR( EffBgnDt, 'yyyy-mm-dd') <= '2010-02-01' )
 AND (TO_CHAR( EffEndDt, 'yyyy-mm-dd') >= '2010-02-01' )
 OR
 ( (TO_CHAR( EffBgnDt, 'yyyy-mm-dd') <= '2010-02-01' )
 AND (EffEndDt IS NULL )
 )Question:
1. Which is the best place in ViewObject class, where I will be able to create common view criteria, include it with existing criterias.
Thanks in Advance.
Raghu

No it is not working. I've tested. When i test your implementation in my sample using AM tester, it is not at all going inside getCriteriaItemClause(ViewCriteriaItem pViewCriteriaItem). For example when i say, AM.findViewObject(String ViewObjectName), followed by getEstimatedRowCount(), it should apply common filter criteria and give me the result.
Given below required scenario:
Department table:
ID DEPT_NAME START_DATE END_DATE
1 Hr 1-Jan-2010
2 Purchasing 1-Jan-2010 31-Dec-2010
3 Shipping 1-Jan-2010 31-Dec-2055
4 Sales 1-Jan-2010
Common criteria to be applied (Programatically) : :bind_current_date between StartDate and EndDate or :bind_current_date >= StartDate and EndDate is null
VO specific view criteria (may vary VO to VO): DeptName not equal to 'Sales'
Expected Result:
Case 1:
 a. DeptView = AM.findViewObject("DepartmentVO")
 b. DeptView.getEstimatedRowCount()
 It should give me 3 records (Hr, Shipping, Sales)
Case 2:
 a. DeptView = AM.findViewObject("DepartmentVO")
 b. Create View Criteria 'NotSalesDeptVC', which should not list out Sales department.
 c. Apply NotSalesDeptVC using RowSet rowSet = (RowSet) this.findByViewCriteria(NotSalesDeptVC, -1, ViewObject.QUERY_MODE_SCAN_VIEW_ROWS)
 d. rowSet.getEstimatedRowCount()
 It is in-memory filtering, will not disturb the default rowset, should give me 2 records (Hr, Shipping)
Case 3:
 a. DeptView = AM.findViewObject("DepartmentVO")
 b. Apply 'NotSalesDeptVC' to the default row set, followed by executeQuery
 c. DeptView.getEstimatedRowCount()
 It should give me 2 records. (Hr, Shipping)
Case 4:
 a. DeptView = AM.findViewObject("DepartmentVO")
 b. Unapply the applied 'NotSalesDeptVC', followed by executeQuery
 c. DeptView.getEstimatedRowcount()
 It should give me 3 records (Hr, Shipping, Sales)Essence is at any point of time, User should always work with active records. He no need to write extra logic to retrieve only the active records but the base Viewobject impl should have. Note, All of my view objects are custom java data source implemented and not query based. Similarly it does not meant that all of my VOs will be having some business specific View criteria. Some VOs may have. Some VOs may not have. However basic active records criteria is applicable for all VOs

Anti-relay filter configuration issues

Configuration issues with the anti-relay filter in Messaging Server 4.1x.
The following information addresses common questions about configuration issues
with the anti-relay filter in Messaging Server 4.1x: 

<OL>
<LI>Question: 
What is the difference between the delivery
and submission
options? 

Answer: 
The submission option
allows specified users to send email to any email address in the world.
These users are typically internal users.

The delivery option
allows specified users to receive email from anybody. These users
are also typically internal users.

A standard filter will appear something as follows: 

# This is the anti-relay config file written by Jay at iPlanet
# The first section sets default conditions
resolvehostnames:0
useauthinfo:0
advertiseauthinfo:1
# This section sets domains to be delivered to by anybody
delivery:*@my.domain.com
# This section sets domains that can send any place
submission:129.12.4.*


<LI>Question: 
The delivery
option works properly. However, why doesn't the
submission option
appear to be allowing emails from specified users to pass through?

Answer: 
The problem with the submission behavior could be due to the setting of the
the resolvehostnames
parameter. If this parameter is turned on
(resolvehostnames:1),
then all entries in this configuration file must be fully qualified
host names. Although wildcards will work, you cannot specify IP
addresses with this configuration setting.


<LI>Question: 
Is it possible to allow people outside of my network to connect to the server
and send mail out?

Answer: 
Yes. To allow outside users to connect to the server and send mail
to any address, without granting the same privilege to the rest of the world,
activate the authenticated SMTP portion of the filter via the
useauthinfo option.
Setting this parameter to "1" (i.e., useauthinfo:1
) will require a user who is not in a
submission address and who is attempting to send email to an address not in
the delivery range to authenticate with a user ID and password.
</OL>

For additional information on the anti-relay filter, please refer to the
Messaging Server 4.1 Administrator's Guide at 

http://docs.iplanet.com/docs/manuals/messaging/nms41/ag/ubefiltr.htm#1073677

Prashant:
Are you using a UBE filter to configure domain-based anti-relayinging? We had better luck with the anti-relay plug-in. There is some info on this (for 4.15) at
http://docs.sun.com/source/816-6044-10/ubefiltr.htm#1069973
You have to enable the plug-in using configutil, per the above. The anti-relay plug-in is controlled by antirelay.conf. Be aware that the pattern matching rules are very limited, and not well documented. Fortunately, the source code to the plug-in is included, and you can see what it is doing. To pass the tests we had to add a hard-coded test for a "%" in the source and recompile:
*** antirelay.c.orig Thu Oct 31 04:42:13 2002
--- antirelay.c Thu Oct 31 04:22:07 2002
*** 934,939 ****
--- 934,940 ----
* Weight must be non-zero to begin with so that matches on just "*"
* will work.
+ if( strchr(text,'%') != NULL ) return ABORT;
weight = TRUE;
for ( ; *p; text++, p++) {
if (*text == '\0' && p != '')
Not a really elegant hack, but we didn't need a fully functional regex engine.

Design suggestion for application-wide configuration properties

Hello all
I am seeking opinions on how to design an application in which multiple classes have access to a common set of configuration properties that may change at runtime.
Until now, I would create an abstract class dedicated to initializing the properties set and enabling access to them from anywhere in the application through appropriate get/set static methods (most probably using an internal java.util.Properties object). Lately, my confidence in that approach seems to diminish.
So, I thought I should ask... do you see any issues with the above approach? Would you suggest any alternatives?
What I am essentially looking for here is a best practice to stick with from now on.
Thanks in advance
G

909773 wrote:
For example a 24x7 service that is supposed to handle requests on port X is very unlikely to need to change to port Y while running.
Or what happens if you have a plugin architecture and someone changes the root plugin directory to another directory.On the other hand, the maximum draw distance in a virtual world, an application's "skin", or a filesharing client's bandwidth limit are, in my view, properties that may very well need to change at runtime.
Seems reasonable to me. That is the easy part. The hard part is
1. How/when do you reload
2. How do you code your app so it gets the new values and uses themAs for 1, apologies if I haven't explained correctly: I am talking about properties that may change programmatically at runtime, e.g., by a user through a configuration dialog. Ok.
I can think of at least one way to deal with 2 (classes interested in all or a few of the properties implement some property listener interface and accordingly re-get values when notified about changes).That is how you detect it. It has nothing to do with whether the current running process is in a state that allows changes to be made.
all over the code reflects a wise design decision vs using a singleton property manager, references to a single property manager object (maybe even a java.util.Properties object) passed around through constructors, approaches involving dependency injection (not relying on any framework though), or else.Depends on the application. For example with a distributed system propogating the changes correctly so systems are not out of sync can be problematic.
Depends on the context in which your user makes changes. If it is an admin then it has the same context has if you were using a file. In that case I would use a singleton.
If it is a user changing part of the system, then you can't use a singleton. In that case you would need a context object from which other code derives the configuration values it uses. That is a one layer hierarchy and of course more levels require more complexity via a context object for each level.

Shared services registration failing during configuration of EPMA 11.1.1.3

Hi All, I am currently woking on essbase and no knowledge of planning so trying to upgrade my knowledge. I installed epma 11.1.1.3 on windows 2003 VMware work station as I have windows 7 laptop. installed oracle 10g created a database (epma) created user/schemas (sm,ms) trying to configure foundation services, essbase, planning and reporting and analysis. the configure database and register with shared services failed. Am I doing anything wrong. I followed some documents for configuration which are well documented with screen shots still do not know what wrong I am doing. Please advice on how to avoid these failures.
Below is the validation results of the configuration.
Thanks in advance.
Srinivas
Oracle EPM System
Diagnostic Reports
Generated on 3/3/12 11:05 PM
Validation run on srinivas
Validation tool info: 11.1.1.3.0 drop 9-0 build 3129 on 07/16/2009 01:24 PM
OS name: Windows 2003
OS version: 5.2
Test Status Service Test Description Duration
Hyperion Foundation
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
relationalStorageConfiguration: Configuration Failed
Recommended Action: Try to configure mentioned tasks 0 s
FAILED OPN: OpenLDAP Check if global roles number no less than 16
Error: $item.exception.localizedMessage
Recommended Action: 0 s
FAILED OPN: OpenLDAP Connection to OpenLDAP
Error: srinivas:28089
Recommended Action: Start open LDAP 1 s
ERP Integrator
PASSED CFG: Configuration WARNING: Some of suggested configuration tasks not completed yet.
Check whether all configuration tasks have been completed 0 s
Essbase / Client
PASSED WR: Windows Registry Check if EQD excel addin registered for Essbase Client 0 s
Essbase / Essbase
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Recommended Action: Try to configure mentioned tasks 0 s
FAILED EAS: Essbase server Essbase Server startup check using Maxl command
Error: Result: Unable to connect Essbase Server using MAXL command. Please check that essbase server is running.
Recommended Action: Check Essbase Server is started. 0 s
FAILED SVR: Essbase Java API Launch external checker with next command: C:\Hyperion\common\validation\9.5.0.0\launchEssbaseJavaAPI.bat EssbaseJAPIConnect admin ****** srinivas http://srinivas:13080/aps/JAPI
Error: Result: -1; Error message: Cannot connect to olap service. Cannot connect to Essbase Server at srinivas. Timed out waiting to connect to the Essbase Agent/Server using TCP/IP. Check your network connections.
Recommended Action: Make sure external checker is working. 7 s
Essbase / Essbase Administration Services
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Some of suggested configuration tasks not completed yet.
Recommended Action: Try to configure mentioned tasks 0 s
Essbase / Provider Services
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Recommended Action: Try to configure mentioned tasks 0 s
Essbase / Smart Search
PASSED CFG: Configuration Check whether all configuration tasks have been completed 0 s
Essbase / Studio
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Some of suggested configuration tasks not completed yet.
Recommended Action: Try to configure mentioned tasks 0 s
Financial Data Quality Management
PASSED CFG: Configuration WARNING: Some of suggested configuration tasks not completed yet.
Check whether all configuration tasks have been completed 0 s
Foundation / Calculation Manager
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Some of suggested configuration tasks not completed yet.
Recommended Action: Try to configure mentioned tasks 0 s
Foundation / Performance Management Architect
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Some of suggested configuration tasks not completed yet.
Recommended Action: Try to configure mentioned tasks 0 s
Foundation / Workspace
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
Some of suggested configuration tasks not completed yet.
Recommended Action: Try to configure mentioned tasks 0 s
PASSED HTTP: Http Is file [C:\Hyperion\common\httpServers\Apache\2.0.59\bin\installhyperionapacheservice.err] empty 0 s
PASSED HTTP: Http Check string [LoadModule jk_module modules/mod_jk] in file[C:\Hyperion\common\httpServers\Apache\2.0.59\conf\httpd.conf] 0 s
PASSED REG: Registry All links are present in registry. 0 s
Performance Scorecard
PASSED CFG: Configuration WARNING: Some of suggested configuration tasks not completed yet.
Check whether all configuration tasks have been completed 0 s
Planning
FAILED CFG: Configuration Check whether all configuration tasks have been completed
Error: Next tasks are not configured:
hubRegistration: Configuration Failed
applicationServerDeployment: Configuration Failed
Some of suggested configuration tasks not completed yet.
Recommended Action: Try to configure mentioned tasks 0 s
Profitability and Cost Management
PASSED CFG: Configuration WARNING: Some of suggested configuration tasks not completed yet.
Check whether all configuration tasks have been completed 0 s
Strategic Finance
PASSED CFG: Configuration WARNING: Some of suggested configuration tasks not completed yet.
Check whether all configuration tasks have been completed 0 s
Financial Management
PASSED CFG: Configuration WARNING: Some of suggested configuration tasks not completed yet.
Check whether all configuration tasks have been completed 0 s
Reporting and Analysis
PASSED CFG: Configuration Check whether all configuration tasks have been completed 0 s
FAILED SVR: Essbase Java API Launch external checker with next command: C:\Hyperion\common\validation\9.5.0.0\launchEssbaseJavaAPI.bat EssbaseJAPIConnect admin ****** srinivas http://srinivas:13080/aps/JAPI
Error: Result: -1; Error message: Cannot connect to olap service. Cannot connect to Essbase Server at srinivas. Timed out waiting to connect to the Essbase Agent/Server using TCP/IP. Check your network connections.
Recommended Action: Make sure external checker is working. 3 s
Test start time: 11:05:18 PM
Test end time: 11:05:40 PM
Total test duration: 21 s

Thanks to all for your suggestions. Below is the log I have checked at the first instance of failure after that resitering with shared services failed for every product. Is this something to do withis database connection? Please advise on how to resolve it.
Mar 6, 2012 10:48:54 AM org.apache.coyote.http11.Http11BaseProtocol init
INFO: Initializing Coyote HTTP/1.1 on http-28080
Mar 6, 2012 10:48:54 AM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 3531 ms
Mar 6, 2012 10:48:54 AM org.apache.catalina.core.StandardService start
INFO: Starting service Catalina
Mar 6, 2012 10:48:54 AM org.apache.catalina.core.StandardEngine start
INFO: Starting Servlet Engine: Hyperion Embedded Java Container/1.0.0
Mar 6, 2012 10:48:55 AM org.apache.catalina.core.StandardHost start
INFO: XML validation disabled
log dir isC:\Hyperion\logs\SharedServices9
urlManifest jar:file:/C:/Hyperion/deployments/Tomcat5/SharedServices9/webapps/interop/WEB-INF/lib/interop-mmc.jar!/META-INF/MANIFEST.MF
Shared Services Version: 11.1.1.3.24
Shared Services Drop Number: 6
Attempting to verify the database configuration
Attempting to verify the database configuration
Database configuration test passed.
06 Mar 2012 10:50:27 - org.apache.slide.common.Domain - INFO - Auto-Initializing Domain
06 Mar 2012 10:50:27 - org.apache.slide.common.Domain - INFO - Configuration found in classpath
06 Mar 2012 10:50:27 - org.apache.slide.common.Domain - INFO - Domain configuration : {org.apache.slide.lock=true, org.apache.slide.versioncontrol=true, org.apache.slide.debug=false, org.apache.slide.search=true, org.apache.slide.security=true, org.apache.slide.urlEncoding=UTF-8, org.apache.slide.domain=C:/Hyperion/deployments/Tomcat5/SharedServices9/config/Domain.xml}
configURL: file:///C:/Hyperion/deployments/Tomcat5/SharedServices9/config/CSS.xml
Done initialize: null
06 Mar 2012 10:50:35 - org.apache.slide.common.Domain - ERROR - Unable to migrate hub groups to css
connection pool registered:dbcpPool-org.apache.commons.pool.impl.GenericObjectPool@9b2a51
connection pool registered:dbcpPool-org.apache.commons.pool.impl.GenericObjectPool@2431b9
CMSOfflineServlet Initialized
2012-03-06 10:50:42,328 [main] ERROR com.hyperion.ces.utils.db.DBRegistryManager.<init>(DBRegistryManager.java:74) - Failed to get Registry Instance! DB Connection is not existing for SharedService. Check registry for SharedService.
2012-03-06 10:50:42,328 [main] ERROR com.hyperion.workflow.engine.server.repository.WfDomainStoreRdbms.initialize(WfDomainStoreRdbms.java:167) - java.lang.Exception: Failed to get Registry Instance! DB Connection is not existing for SharedService. Check registry for SharedService.
2012-03-06 10:50:42,328 [main] ERROR com.hyperion.workflow.engine.server.repository.WfDomainStoreRdbms.initialize(WfDomainStoreRdbms.java:167) - java.lang.Exception: Failed to get Registry Instance! DB Connection is not existing for SharedService. Check registry for SharedService.
2012-03-06 10:50:42,343 [main] ERROR com.hyperion.cesdsf.server.framework.DsfServer.init(DsfServer.java:51) - com.hyperion.workflow.engine.api.base.WfException: Failed to get Registry Instance! DB Connection is not existing for SharedService. Check registry for SharedService.
2012-03-06 10:50:42,390 [main] ERROR com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.wfx(WorkflowEngineServiceLocal.java:2584) - Cannot getUsers.
java.lang.NullPointerException
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.getUsers(WorkflowEngineServiceLocal.java:780)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.getUserFromCES(WorkflowEngineServiceLocal.java:536)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.systemSignOn(WorkflowEngineServiceLocal.java:341)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.signOn(WorkflowEngineServiceLocal.java:387)
 at com.hyperion.workflow.engine.api.base.WorkflowEngine.signOn(WorkflowEngine.java:80)
 at com.hyperion.workflow.engine.api.base.WorkflowEngine.trustedSignOn(WorkflowEngine.java:94)
 at com.hyperion.workflow.engine.api.base.WorkflowEngine.trustedSignOn(WorkflowEngine.java:90)
 at com.hyperion.workflow.agent.TaskReceiver.init(TaskReceiver.java:34)
 at javax.servlet.GenericServlet.init(GenericServlet.java:211)
 at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1105)
 at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:932)
 at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3917)
 at org.apache.catalina.core.StandardContext.start(StandardContext.java:4201)
 at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
 at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
 at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
 at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:904)
 at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:867)
 at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)
 at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
 at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
 at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
 at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
 at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
 at org.apache.catalina.core.StandardService.start(StandardService.java:450)
 at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:585)
 at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
 at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
2012-03-06 10:50:42,390 [main] ERROR com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.wfx(WorkflowEngineServiceLocal.java:2584) - Cannot signOn.
com.hyperion.workflow.engine.api.base.WfException: Cannot getUsers.null
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.wfx(WorkflowEngineServiceLocal.java:2593)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.getUsers(WorkflowEngineServiceLocal.java:782)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.getUserFromCES(WorkflowEngineServiceLocal.java:536)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.systemSignOn(WorkflowEngineServiceLocal.java:341)
 at com.hyperion.workflow.engine.server.framework.WorkflowEngineServiceLocal.signOn(WorkflowEngineServiceLocal.java:387)
 at com.hyperion.workflow.engine.api.base.WorkflowEngine.signOn(WorkflowEngine.java:80)
 at com.hyperion.workflow.engine.api.base.WorkflowEngine.trustedSignOn(WorkflowEngine.java:94)
 at com.hyperion.workflow.engine.api.base.WorkflowEngine.trustedSignOn(WorkflowEngine.java:90)
 at com.hyperion.workflow.agent.TaskReceiver.init(TaskReceiver.java:34)
 at javax.servlet.GenericServlet.init(GenericServlet.java:211)
 at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1105)
 at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:932)
 at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3917)
 at org.apache.catalina.core.StandardContext.start(StandardContext.java:4201)
 at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:759)
 at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:739)
 at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:524)
 at org.apache.catalina.startup.HostConfig.deployDirectory(HostConfig.java:904)
 at org.apache.catalina.startup.HostConfig.deployDirectories(HostConfig.java:867)
 at org.apache.catalina.startup.HostConfig.deployApps(HostConfig.java:474)
 at org.apache.catalina.startup.HostConfig.start(HostConfig.java:1122)
 at org.apache.catalina.startup.HostConfig.lifecycleEvent(HostConfig.java:310)
 at org.apache.catalina.util.LifecycleSupport.fireLifecycleEvent(LifecycleSupport.java:119)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1021)
 at org.apache.catalina.core.StandardHost.start(StandardHost.java:718)
 at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1013)
 at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:442)
 at org.apache.catalina.core.StandardService.start(StandardService.java:450)
 at org.apache.catalina.core.StandardServer.start(StandardServer.java:709)
 at org.apache.catalina.startup.Catalina.start(Catalina.java:551)
 at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
 at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
 at java.lang.reflect.Method.invoke(Method.java:585)
 at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:294)
 at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
2012-03-06 10:50:42,390 [main] ERROR com.hyperion.workflow.agent.TaskReceiver.init(TaskReceiver.java:39) - Error Getting the workflowEngine Cannot signOn.Cannot getUsers.null
Mar 6, 2012 10:50:42 AM org.apache.coyote.http11.Http11BaseProtocol start
INFO: Starting Coyote HTTP/1.1 on http-28080
Mar 6, 2012 10:50:43 AM org.apache.jk.common.ChannelSocket init
INFO: JK: ajp13 listening on /0.0.0.0:28082
Mar 6, 2012 10:50:43 AM org.apache.jk.server.JkMain start
INFO: Jk running ID=0 time=0/125 config=null
Mar 6, 2012 10:50:43 AM org.apache.catalina.startup.Catalina start
INFO: Server startup in 108250 ms

EPM 11 - Issue with Shared Services Registration and DB configuration

Hi,
Im installing Oracle EPM 11.1.1...
I have successfully installed Foundation Services and Essbase Server/Client...
But I'm facing two issues...
1. I couldnt able to register any products to the Shared Services except for Essbase Server
I tried restarting the services (1) Hyperion Foundation OpenLDAP, (2) Hyperion Foundation Shared Services - Web Application in the same order...
2. I couldnt able to configure Oracle 10.2.0.1.0 for Essbase Administration Services...
It shows the below error...
"com.hyperion.cis.config.CmsRegistrationUtil, ERROR, register operation failed in CMS:
com.hyperion.interop.lib.OperationFailedException: Registeration failed: null.Registeration failed: null.
     at com.hyperion.interop.lib.helper.RegistrationHelper.register(Unknown Source)
     at com.hyperion.interop.lib.CMSClient.register(Unknown Source)
     at com.hyperion.cis.config.CmsRegistrationUtil.registerApplication(CmsRegistrationUtil.java:200)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.executeHubRegistrationTask(RunAllTasksWizardAction.java:427)
     at com.hyperion.cis.config.wizard.RunAllTasksWizardAction.execute(RunAllTasksWizardAction.java:212)
     at com.installshield.wizard.RunnableWizardBeanContext.run(Unknown Source)
com.hyperion.cis.config.wizard.RunAllTasksWizardAction, ERROR, Error:
java.lang.Exception: Registeration failed: null.Registeration failed: null.
     at com.hyperion.cis.config.CmsRegistrationUtil.registerApplication(CmsRegistrationUtil.java:212)"
But I could use the same version of Oracle database successfully for Shared Services and Essbase Studio database configuration...
Please help me to resolve this issue....
Thanks & Regards,
dmaze

Hello!
During your first configuration of the EPM System Fusion Edition, configure the two conponents first - COMMON SETTINGS and CONFIGURE DATABASE. Never configure other components together with these two (especially Workspace). After you have configured these two, then you can rerun the configuration utility and configure the components that you left out.
Hope this helps.
Cheers!

Delivery List : Selection criteria in VA05

Hii
Can any body please solve this out?
1. In VA05, I want to set the date of present month. Like if I open that in august then the date range will show by default 01.08.09 initial and ending 31.08.09 and if I open that in september then it will be 01.09.09 and 30.09.09
Note - Display Variant is not working. Tell me some other tricks
2. In Further Select Criteria there is no criteria for plant. Is it possible to set Plant option over there?
Please solve the issue.
Thanks and Regards
Santanu

Hi
Plant can be added to the list of further selection criteria through configuration. Please follow the below process...
Goto IMG - Sales & Distribution - Sales - Lists - Define Selection Criteria - execute
In the screen - goto New Entries and add the following details..
1. Program Name - SAPMV75A
2. TRG (Transaction Group) - 0
3. Display Group - K
4. Event - SELK
5. It - 8
6. Field Name - WERKS
Enter the details and save the changes. Goto VA05 and you can see the field PLANT in the Fur Sel Criteria.
Thanks,
Ravi

ASA5510 - Common Criteria EAL4 configuration

Similar Messages

Maybe you are looking for