Root CA and Authority Key Identifier

We are in the process of migrating our AD CS servers to Windows 2012 R2 and at the same time changing the algorithm to SHA256 with key length of 4096 bits.
Is it possible to have the Authority Key Identifier (AKI) included in the root certificate?

AKI is not necessary in the root certificate as it will match SKI (Subject Key Identifier). Why waste certificate size?
Vadims Podāns, aka PowerShell CryptoGuy
My weblog: en-us.sysadmins.lv
PowerShell PKI Module: pspki.codeplex.com
PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
Check out new: SSL Certificate Verifier
Check out new:
PowerShell File Checksum Integrity Verifier tool.

Similar Messages

How do I identify the latest file modifications, application install, and registry key modification for Security Forensics.... using GP Audit for registry/file system

Hello,
Title pretty much states it all. I initially set out (as part of a Security Forensics initiative) to identify the most recently installed applications, modified files, and registry key changes using PowerShell. I attempted to pull this information and sort
them by date installed/last modified, but it was brought to my attention this information isn't always present and can be modified - so it's not accurate.
At that time it was suggested we use Group Policy auditing for Registry and File System - but I'm not sure how I'm going to use/pull these in PowerShell? This will be used on remote host all over the world so local physical access isn't an option.
My question is:
Once Group Policy Auditing for Registry and File System has been enabled, how would I go about pulling those audit logs for review once a system has been identified as compromised? I'm brand new to this GP Auditing (we have a separate team for that) so feel
free to take it from the beginning. :)
Thanks in advance!

Hi,
Here are a few suggestions for you:
Ensure Remote Registry service is started on local and remote machines.
Add the – Credential option and supply administrative credentials within the command.
More information for you:
Get-Eventlog doesn't work against Vista/W7 clients
https://social.technet.microsoft.com/Forums/en-US/c5185a01-b0d2-49a7-9aa7-52e6534ada04/geteventlog-doesnt-work-against-vistaw7-clients?forum=winserverpowershell
PowerShell - How to Get XML EventData - Remote Eventlogs - Exchange Events
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/382b10c9-d740-46b1-b81c-b24de911eb14/powershell-how-to-get-xml-eventdata-remote-eventlogs-exchange-events-?forum=ITCG
Powershell script to gather failed logon attempts by event id and type from the security events log
https://social.technet.microsoft.com/Forums/scriptcenter/es-ES/00a62492-c63a-4c8b-92f9-1cc857223a00/powershell-script-to-gather-failed-logon-attempts-by-event-id-and-type-from-the-security-events-log?forum=ITCG
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Pavilion dv4-1275mx notebook - once-flashing leds @ caps lock and scroll keys @ start-up

My HP Pavilion dv4-1275mx notebook runs Windows Vista Home Premium service pack 1 for 64x-based systems.
Recently, when I turn it on, the led lights @ the caps lock and scroll keys repeatedly flash once.
I'm not sure what, if anything, happened prior to this starting. It's possible that there was a power surge when it was shut off, or it may be related to doing a McAfee virus scan or installing the latest version of a software, e.g., Adobe Reader.
I was able to use my System Recovery disks to reinstall the Vista software, thinking this might "kickstart" my computer into working, e.g., as part of the restart process. After the reinstallation, I was able to use my computer, although the led lights continued to flash. However, once I shut down my computer, I have been unable to restart it. The leds continue to flash upon start-up, and I have not been successful in again reinstalling the Vista software. (I thought if could get my computer to work again that way, it might stay accessible if I used hiberate mode instead of shutting it down.)
The computer's about 4-1/2 years old. The screen has a short of some kind (only turning on when the screen is low to the keyboard, so I use an external monitor.

Try the steps in the following weblink:
http://h10025.www1.hp.com/ewfrf/wc/document?cc=us&lc=en&docname=c00372748
If the issue persists, please read the following document, understand the LED blink code, identify the root cause and try troubleshooting appropriately:
http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/kb/docDisplay/?javax.portlet.begCach...
I am an HP employee.
Regards,
Vidya
Make it easier for other people to find solutions, by marking my answer “Accept as Solution” if it solves your problem.
***Click on "Thumbs up" button to the bottom right side of my post to say thanks!***

Remote System and Remote Key Mapping at a glance

Hi,
I want to discuss the concept of Remote System and Remote Key Mapping.
Remote System is a logical system which is defined in MDM Console for a MDM Repository.
We can define key mapping enabled at each table level.
The key mapping is used to distinguish records at Data Manager after running the Data Import.
Now 1 record can have 1 remote system with two different keys but two different records cannot have same remote system with same remote key. So, Remote key is an unique identifier for record for any remote system for each individual records.
Now whenever we import data from a Remote System, the remote system and remote key are mapped for each individual records. Usually all records have different remote keys.
Now, when syndicating back the record with default remote key is updated in the remote system that is sent by xml file format.
If same record is updated two times from a same remote system, the remote key will be different and the record which is latest contains highest remote key.
Now, I have to look at Data Syndication and Remote key.
I have not done Data Syndication but my concept tell if there is duplicate record with same remote system but different remote keys both will be syndicated back. But if same record have two remote keys for same remote system then only the default remote key is syndicated back.
Regards
Kaushik Banerjee

You are right Kaushik,
I have not done Data Syndication but my concept tell if there is duplicate record with same remote system but different remote keys both will be syndicated back.
Yes, but if they are duplicate, they needs to be merged.
But if same record have two remote keys for same remote system then only the default remote key is syndicated back.
This is after merging. So whichever remote key has tick mark in key mapping option(default) , it will be syndicated back.
Pls refer to these links for better understanding.
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/uuid/80eb6ea5-2a2f-2b10-f68e-bf735a45705f
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/uuid/7051c376-f939-2b10-7da1-c4f8f9eecc8c%0c
Hope this helps,
+ An

Diff b/w primary key and unique key?

what is the diff b/w primary key and unique key?

Hi,
With respect to functionality both are same.
But in ABAP we only have Primary key for the Database tables declared in the Data Dictionary.
Unique is generally is the term used with declaring key's for internal tables.
Both primary and Unique keys can identify one record of a table.
Regards,
Sesh

What is the diffrence between "Key to Select" and "Selected Key" while creating Radio Buttons?

While creating radio buttons there is a confusion regarding two properties "Key to Select" and "Selected Key".Can anybody explain it with example?
Thanks,
Vimal

Hi Vimal,
Please find my explanation as below
Key to Select: This is the unique key for each radio button to identify which one is selected
Selected Key: This holds the "KEY" of selected radio button
Example:
   Let us say we have 2 radio buttons : Male & Female
     Create a context attribute SELECTED_KEY of type STRING.
     Create an action ON_SELECT for radio button select event
     Now,
     the properties for "MALE" radio button as below
          KEY_TO_SELECT = 'M'
          SELECTED_KEY = "bind to the context attribute SELECTED_KEY
          OnSelect = 'ON_SELECT'.
     The properties for 'Female" radio button as below
          KEY_TO_SELECT = 'F'
          SELECTED_KEY = "bind to the context attribute SELECTED_KEY
          OnSelect = 'ON_SELECT'.
If we select radio button 'Male', we get the key as 'M' and for 'Female' radio button 'F'.
check inside the event handler method ONACTIONON_SELECT, you get the 'KEY' of selected radio button.
So, the context attribute 'SELECTED_KEY' gets filled with the key of selected radio button
Hope this helps you in distinguishing the 'KEY TO SELECT' & 'SELECTED KEY' .
Regards,
Rama

Satellite L300 - 'W' and 'F' Keys not working - can't log

Hi,
I have a Toshiba Satellite L300.
My 'F' and 'w' keys arent working, and because I have a Built-in HDD user password of which contains those letters, I can not start up my computer.
I had a 'startup' problem a couple of months back, and what I had to do was restore my laptop to a previous date. I did this through Boot management during startup. The only thing is I cant remember how to do it now.
I cant find any restoration disks that may have come with my laptop- so the only way I can do it is through boot management.
So, how do you do a system restore? or is there another way of fixing this problem?.
Please help!! :)

Hello
If W and F key dont work I would recommend replacing the keyboard or use an external one. In my opinion its the best choice because you also need the keys for typing letters or emails
You can get a new keyboard from an authorized service provider in your country.
> I cant find any restoration disks that may have come with my laptop
I think you should read the user manual because you have to create this disk yourself ;)

Air drank cup of tea. Now it doesn't charge with it's own charger and 2 keys got broken.

Hey guys.
My wife spilled a cup of tea with sugar on her Air. Now it doesn't charge with it's own charger (14.5V, 3.1A) but it does with macbook pro's charger (18.5V, 4.6A). This is weird. Our local "certified" reseller (we don't have Apple Store in out country) suggested to avoid fixing it, since they could not identify the problem. I think they're lame but I'm ok with uncomfy charging. But there's still 2 keys not workng. The comma and period keys. These are quite important and used very frequently. Resseler suggested to replace keboard, but €250 is a bit pricey.
So what I was thinking — to get them fixed by myself. This is apparently circute closing, which in theory is easy to fix. I have experience disassembling our mid 2011 Air. Not the keyboard, but I did clean the logic board and most of other compartments.
What do you think? Does it work disasembling the front cover from the keyboard and fix it? Are they any downfalls assembling it back?
Thanks.
Alex.

The problem here is going to be twofold - getting the needed part(s) and making sure the MacBook Air will work long term after any repair you do.
Apple does not sell repair parts to consumers, so you will need to look into a used parts market. Be sure you get the same exact model.
One big problem is that the MBA has a soft-cell battery. If someone that doesn't know what they're doing punctures, squeezes, flexes, or even looks at the battery the wrong way, it could literally blow up in their face.
You may end up with a totally non-functional MBA even after spending money on the parts and have nothing to show for your efforts.
If you can, at least you should be able to use the computer as it is now with an external keyboard. That might be a better solution.
Best of luck.

My "caps lock" key and "P" key do not respond on my 2009 macbook pro unibody

I recently bought a used macbook pro for university. When I bought it the guy who had it before me was running windows 7 on the machine. (why ruin a mac with windows software? I have no idea) I love macs and everything about them so I decided to wipe the hard drive clean and run OSX like any other normal mac user... well now the "caps lock" and "P" keys do not respond at all!!! I've checked my keyboard settings and keyboard and character viewer and its only those keys that do not respond!! Any ideas how I could reset the hardware? (I have a feeling he had to configure the keys to windows software) And yes, I did see the keys work when I bought it!! Does anybody know apples policy on applecare? like what would I need to bring in to redeem it? (I know this computer is warrantied until 2013)

I got the exact same roblem- you can see that, "p" missing in the word problem.
And Caps lock doesn't work either.
A few hours ago, I had problem with Shift keys. They were stuck, I don't know which one but everything would be capatalized and minimizing windows would be very slow. Then the repairman at a Mac Support center (authorized reseller, no Apple stores here) took off the back cover and cleaned a small chord or something and the Shift problem vanished and this one appeared. The guy thinks it's related to keyboard- must be!- and I need to change it. Could there be any other option?
ps: I copied and pasted all the 'p's in this piece.
MacBook Pro, Mac OS X (10.6.8)

Diff b/w surragate keys and primary keys

Can any one of u pls explain the difference between primary key and surragate keys,pls explain me with simple example

Hi rajesh,
surrogate key: For every master data record, system create a SID (Surrogate ID). If that particular master data record is used in infocube, system store the SID corresponding to that master data in dimension table and the dimension id of the dimension table is stored in infocube Fact 'F' table.
Primary key: while creating a table we will select unique field and create as primary key..for eg empid acts as a unique key (primary key) for emp table. through this primary key we can identify the table to get the data from the table.
i hope this helps u.
regards
anil

How to Create Instances in the Transient Root Node and Sub Nodes from Root Node Query Method ?

Hi All,
I am Creating a BOPF BO with 3 Nodes,
Node 1) ROOT -- > contains a query,
using Root Node I have created Search UIBB Configuration in FBI.
In testing -- > when i enter Data in the Search Criteria Fields am able to get the details in to the query method
from Imporing parameter : 'IT_SELECTION_PARAMETERS'.
HERE I am fetching data from a standard table and trying to fill the data in the Node : 'MNR_SEARCH_RESULT'.
How to Append data to the Sub node 'MNR_SEARCH_RESULT' when there is no Node instance created in the ROOT Node ?
For This I have created an instance in the ROOT Node and Using that I tried to create Instance in the Sub Node 'MNR_SEARCH_RESULT'.
Below is my code which i have placed in the Query method ..
DATA : LR_DATA TYPE REF TO ZBO_S_ROOT1.
DATA : LR_SEARCH_RES TYPE REF TO ZBO_S_MNR_SEARCH_RESULT.
DATA : LO_CI_SERVICE_MANAGER TYPE REF TO /BOBF/IF_TRA_SERVICE_MANAGER,
        LO_TRANSACTION_MANAGER TYPE REF TO /BOBF/IF_TRA_TRANSACTION_MGR.
   LO_CI_SERVICE_MANAGER = /BOBF/CL_TRA_SERV_MGR_FACTORY=>GET_SERVICE_MANAGER( IV_BO_KEY = ZIF_BO_TEST_PO_C=>SC_BO_KEY ).
   LO_TRANSACTION_MANAGER = /BOBF/CL_TRA_TRANS_MGR_FACTORY=>GET_TRANSACTION_MANAGER( ).
CREATE DATA LR_DATA.
LR_DATA->KEY = LO_CI_SERVICE_MANAGER->GET_NEW_KEY( ).
LR_DATA->ROOT_KEY   = IS_CTX-ROOT_NODE_KEY.
LR_DATA->PIPO_MAT_ID = '100100'.
LR_DATA->PIPO_MAT_DESC = 'MATERIAL'.
LR_DATA->PIPO_SPRAS = 'E'.
LR_DATA->PIPO_MATL_TYPE = 'ZPMI'.
LR_DATA->PIPO_MATL_GROUP = 'ZKK'.
     DATA lt_mod      TYPE /bobf/t_frw_modification.
     DATA lo_change   TYPE REF TO /bobf/if_tra_change.
     DATA lo_message TYPE REF TO /bobf/if_frw_message.
     FIELD-SYMBOLS: <ls_mod> LIKE LINE OF lt_mod.
    APPEND INITIAL LINE TO lt_mod ASSIGNING <ls_mod> .
    <ls_mod>-node        =   ZIF_BO_TEST_PO_C=>sc_node-ROOT.
    <ls_mod>-change_mode = /bobf/if_frw_c=>sc_modify_create.
    <ls_mod>-key         = LR_DATA->KEY.
    <ls_mod>-data        = LR_DATA.
DATA : LT_CHG_FIELDS TYPE /BOBF/T_FRW_NAME.
DATA : LS_CHG_FIELDS LIKE LINE OF LT_CHG_FIELDS.
DATA : LV_KEY TYPE /BOBF/CONF_KEY.
CALL METHOD IO_MODIFY->CREATE
   EXPORTING
     IV_NODE            = ZIF_BO_TEST_PO_C=>sc_node-ROOT
     IV_KEY             = LR_DATA->KEY
     IS_DATA            = LR_DATA
     IV_ROOT_KEY        = IS_CTX-ROOT_NODE_KEY
   IMPORTING
     EV_KEY             = LV_KEY .
CREATE DATA LR_SEARCH_RES.
LR_SEARCH_RES->KEY           = LO_CI_SERVICE_MANAGER->GET_NEW_KEY( )..
LR_SEARCH_RES->PARENT_KEY    = LV_KEY.
LR_SEARCH_RES->ROOT_KEY    = LV_KEY.
LR_SEARCH_RES->MATNR    = '123'.
LR_SEARCH_RES->ERSDA    = SY-DATUM.
LR_SEARCH_RES->ERNAM    = SY-UNAME.
**LR_SEARCH_RES->LAEDA    = .
**LR_SEARCH_RES->AENAM    = .
**LR_SEARCH_RES->VPSTA    = .
*LR_SEARCH_RES->LVORM    = .
LR_SEARCH_RES->MTART    = 'ZPI'.
LR_SEARCH_RES->MBRSH    = 'ZTP' .
LR_SEARCH_RES->MATKL    = 'MAT'.
**LR_SEARCH_RES->BISMT    = ''
**LR_SEARCH_RES->MEINS    =
CALL METHOD io_modify->create
           EXPORTING
             iv_node            = ZIF_BO_TEST_PO_C=>sc_node-MNR_SEARCH_RESULT
             is_data            = LR_SEARCH_RES
             iv_assoc_key       = ZIF_BO_TEST_PO_C=>sc_association-root-MNR_SEARCH_RESULT
             iv_source_node_key = ZIF_BO_TEST_PO_C=>sc_node-root
             iv_source_key      = LV_KEY
             iv_root_key        = LV_KEY.
I am Unable to set data to the Node . I did not get any error message or Dump while executing . when i tried to retrive data I got the details from the node but am unable to view those details in the FBI UI and BOBT UI while testing .
Please provide your valuable Suggestions.
Thanks in Adv.
Thanks ,
Kranthi Kumar M.

Hi Kranthi,
For your requirement you need only two nodes. Root Node and Result node. Use the same structure for both.
To create Instance while search.
Create Query method with input type which has the required fields for selection criteria.
Fetch the data and create instance in the root node.
Pass the new instance key as exporting parameter form Query Method.
To Move data from ROOT to Result.
Create a action at root node.
Write a code to create new entries in Result node.
Then configure the Search UIBB and display result in List UIBB. Add button and assign the action MOVE_MAT_2_RESULT.
Create another List uibb to display data from Result node.
Connect the UIBBs using wire schema. SEARCH -> LIST(ROOT) ---> LIST(RESULT).
Give src node association for ROOT to RESULT Configuration.
Regards,
Sunil

Trying to understand Root CA and Basic EFS certificates

We recently migrated our Root CA from a Win2k3 to Win2k8R2. The migration seems successfully, but we are still attempting to test it out. My colleagues and I have very little knowledge of the Root CA and certificate use on the network in general.
One of the basic tests we are trying is to make sure the new Root CA is issuing certs properly. As part of this, we examined the "Issued Certificates" folder of the Certificate Authority. Many of the certs listed there are issued
to recognizable employees as the "Requester Name" and the certificate template is "Basic EFS (EFS)". We originally assumed this was the certificate issue by our wireless when connecting. However, our attempts to replicate and
generate new certs has not proven that to be true.
We have seen new certs requested and issue since the migration was complete, all from standard employees and using the "Basic EFS (EFS)" template. However, we cannot determine what service they are using to request and be issues the cert.
Through research and testing, I have seen that local file encryption would use and request a cert, but that is not a common service used in our company and would not account for all of the certificate requests.
Can anyone point me in the right direction as to what standard services we could be running where almost every employees has been issued and a (Basic EFS) cert? Wirelss, VPN, ? None of our testing, outside of testing the local file encryption,
has given us any results.

Hard to say for sure what caused it initially. There are some 3rd party USB protection software suites that have been known to cause superfluous enrollments. Here is a trick to see what caused the enrollment to occur. Find one your suspect EFS certs in the
CA database and note the request ID.
After executing this command:
certutil -view -Restrict RequestId=nnnn > rownnnn.txt
You can use the following to dump the request:
certutil rownnnn.txt > rownnnnRequest.txt
Then look for the following attribute in rownnnnRequest.txt:
Attribute[1]: 1.3.6.1.4.1.311.21.20 (Client Information)
Value[1][0], Length = 4d
Unknown Attribute type
Client Id: = 5
ClientIdDefaultRequest -- 5
User: TESTDOM\User1
Machine: test2.contoso.com
Process:
xxxx.exe
Mark B. Cooper, President and Founder of PKI Solutions Inc., former Microsoft Senior Engineer and subject matter expert for Microsoft Active Directory Certificate Services (ADCS). Known as “The PKI Guy” at Microsoft for 10 years.

Multi provider objects and restricted key figure definition

I have the following scenario:
1. I have a multi provider which is used as a template to build a second multiprovider the difference being one of the part provider cubes is replaced by a new cube
2. There is a query built off the original multi provider which consists of a restricted key figure. The definition of the restricted key figure is as follows
    Characteristic 1 - restricted to records with value 'A'
    Characteristic 2 - restricted to records with value 'Blue'
    Key Figure - Total Amount
3. If I go to the original multiprovider and look at how the characteristics are identified and the key figure assigned the details are as follows
     Characteristic 1 - identified from all part providers including the part provider to be replaced
    Characteristic 2 - identified from all part providers including the part provider to be replaced
    Total Amount - assigned from two part providers (which are also involved in the identification of   Characteristic 1 and 2) not including the part provider to be replaced
4. In the new multi provider the details are as follows
Characteristic 1 - identified from all part providers excluding the replacement part provider
    Characteristic 2 - identified from all part providers excluding the replacement part provider
    Total Amount - assigned from two part providers (which are also involved in the identification of   Characteristic 1 and 2) not including the part provider to be replaced
My thoughts are that it does not matter that Characteristic 1 and 2 cannot be identified from the new part provider since as long as the two part providers which are used to assign Total Amount are available in the new multi provider the values shown from the restricted key figure will be the same. Is this correct? Thanks

Hi,
Yes this is correct. As long as you are reporting on Total Amount, the replacement cube will not make a difference because you never identified total amount from it. Did you face any issues?

Whole root or sparse root zones and patching

Hi all,
A while back, I did some cluster patching tests on a system with only sparse root zones, and one with whole root zones...and I seem to recall that the patch time was about equal which surprised me. I had thought the sparse root model mainly is patching the global zone, and even though patchadd may need to run through the sparse NGZ's...that it isn't doing much other than updating /var/sadm info in the NGZ's.
Has anyone seen this to be true or if there are major patching improvements using a "sparse" root NGZ model over a "whole" root model?
thanks much.

My testing showed the same results and I was a bit surprised as well. As I dug into it further my understanding was that the majority of the patch application time goes into figuring out what to patch, not actually copying files around. That work must be done for the sparse zones in the same way as for the full root zones, we just save the few milliseconds of actually backing up and replacing the file.
I suspect there is a large amount of slack that could be optimized in the patching process (both with and without zones), but I don't understand it nearly well enough to say that with any authority.

When I run root.sh and I get OCR errors

Hi all,
When I run root.sh and I get following errors. There are two nodes configured on Solaris 10 for Oracle Database 10g RAC Release 10.2.0.1. I am using openfiler 2.3. and ISCSI for data storage. I have create file system OCR & VOT as Raw device and formatted these devices in Solaris skipping ocr voting disk for the first 1MB to avoid overwriting the disk VTOC. Network configuration and disk permissions are set correctly. I have installed the RAC on the same machines a few months ago for training purpose and everything was working very well. Last week, my openfiler hard disk has died. I have cleared the CRS and database on the same machines and wanted to reinstall oracle RAC on Solaris but now have following problems when I run root.sh from first node I get following errors. Please help me to fix this problem.
This is the error I get:
Oracle Database 10g CRS Release 10.2.0.1.0 Production Copyright 1996, 2005 Oracle. All rights reserved.
2009-12-26 17:03:38.158: [ OCRCONF][1]ocrconfig starts...
2009-12-26 17:03:38.158: [ OCRCONF][1]Upgrading OCR data
2009-12-26 17:03:38.173: [ OCRCONF][1]OCR already in current version.
2009-12-26 17:03:38.192: [ OCRCONF][1]Failed to call clsssinit (21)
2009-12-26 17:03:38.192: [ OCRCONF][1]Failed to make a backup copy of OCR
2009-12-26 17:03:38.192: [ OCRCONF][1]Exiting [status=failed]...
This is ifconfig –a output:
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
nfo0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
inet 192.168.123.110 netmask ffffff00 broadcast 192.168.123.255
ether 0:22:15:19:8:d7
vfe0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
inet 192.168.0.110 netmask ffffff00 broadcast 192.168.0.255
ether 0:1c:f0:c8:36:3a
this is hosts output:
127.0.0.1 localhost
# public network nfo0
192.168.123.110 solaris1
192.168.123.112 solaris2
# privarte interconnect - (vfe0)
192.168.0.110 solaris1-priv
192.168.0.112 solaris2-priv
# Public vertual ip vip on nfo0
192.168.123.120 solaris1-vip
192.168.123.122 solaris2-vip
# private sotartge network for Openfiler - eth0
192.168.0.195 openfiler1
This is the Format output:
AVAILABLE DISK SELECTIONS:
0. c0d0 <DEFAULT cyl 5098 alt 2 hd 255 sec 63>
/pci@0,0/pci-ide@8/ide@0/cmdk@0,0
1. c2t44d0 <DEFAULT cyl 156 alt 2 hd 64 sec 32>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,0
2. c2t45d0 <DEFAULT cyl 60 alt 2 hd 64 sec 32>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,1
3. c2t46d0 <DEFAULT cyl 157 alt 2 hd 64 sec 32>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,2
4. c2t47d0 <DEFAULT cyl 1148 alt 2 hd 255 sec 63>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,3
5. c2t48d0 <DEFAULT cyl 1148 alt 2 hd 255 sec 63>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,4
6. c2t49d0 <DEFAULT cyl 1352 alt 2 hd 255 sec 63>
/iscsi/[email protected]%3Atsn.61af7f03092f0001,5
Specify disk (enter its number):
Thank you

I made a clean installation from scratch. I have prepared the servers step by step and used Metalink Note:367715.1. and I still get following errors. Do you have any recommendation or what to do?
Oracle Database 10g CRS Release 10.2.0.1.0 Production Copyright 1996, 2005 Oracle. All rights reserved.
2010-01-02 18:19:38.860: [ OCRCONF][1]ocrconfig starts...
2010-01-02 18:19:38.861: [ OCRCONF][1]Upgrading OCR data
2010-01-02 18:19:38.870: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.871: [ OCRRAW][1]ibctx:1:ERROR: INVALID FORMAT
2010-01-02 18:19:38.871: [ OCRRAW][1]proprinit:problem reading the bootblock or superbloc 22
2010-01-02 18:19:38.872: [ default][1]a_init:7!: Backend init unsuccessful : [22]
2010-01-02 18:19:38.872: [ OCRCONF][1]Exporting OCR data to [OCRUPGRADEFILE]
2010-01-02 18:19:38.872: [ OCRAPI][1]a_init:7!: Backend init unsuccessful : [33]
2010-01-02 18:19:38.872: [ OCRCONF][1]There was no previous version of OCR. error:[PROC-33: Oracle Cluster Registry is not configured]
2010-01-02 18:19:38.878: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.879: [ OCRRAW][1]ibctx:1:ERROR: INVALID FORMAT
2010-01-02 18:19:38.879: [ OCRRAW][1]proprinit:problem reading the bootblock or superbloc 22
2010-01-02 18:19:38.879: [ default][1]a_init:7!: Backend init unsuccessful : [22]
2010-01-02 18:19:38.885: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.887: [ OCRRAW][1]ibctx:1:ERROR: INVALID FORMAT
2010-01-02 18:19:38.887: [ OCRRAW][1]proprinit:problem reading the bootblock or superbloc 22
2010-01-02 18:19:38.892: [ OCRRAW][1]propriogid:1: INVALID FORMAT
2010-01-02 18:19:38.902: [ OCRRAW][1]propriowv: Vote information on disk 0 [dev/rdsk/c2t1d0s2] is adjusted from [0/0] to [2/2]
2010-01-02 18:19:38.934: [ OCRRAW][1]propriniconfig:No 92 configuration
2010-01-02 18:19:38.934: [ OCRAPI][1]a_init:6a: Backend init successful
2010-01-02 18:19:39.123: [ OCRCONF][1]Initialized DATABASE keys in OCR
2010-01-02 18:19:39.163: [ OCRCONF][1]csetskgfrblock0: clsfmt returned with error [4].
2010-01-02 18:19:39.163: [ OCRCONF][1]Failure in setting block0 [-1]
2010-01-02 18:19:39.163: [ OCRCONF][1]OCR block 0 is not set !
2010-01-02 18:19:39.163: [ OCRCONF][1]Exiting [status=failed]...

Root CA and Authority Key Identifier

Similar Messages

Maybe you are looking for