To resolve this issue, fix the permissions, restart the
nginx service, and regenerate the certificate for Active Response:
- Open a command-line session on the Active Response server.
- Check the permissions for the nginx service. Type ls -all /etc/init.d/nginx and press Enter.
- View the command output. You see that the service's permissions are similar to the following:
-rw-r--r-- 1 root root 2798 Jul 21 2017 /etc/init.d/nginx
The correct permissions are as follows:
-rwxr-xr-x 1 root root 2798 Jul 21 2017 /etc/init.d/nginx
- Update the execute permissions for the nginx service. Type chmod +x /etc/init.d/nginx and press Enter.
- Confirm that the permissions have been updated. Type ls -all /etc/init.d/nginx and press Enter.
You see that the permissions have been set to the following:
-rwxr-xr-x 1 root root 2798 Jul 21 2017 /etc/init.d/nginx
- Apply the product changes. Restart the ngnix services:
- Type service nginx stop and press Enter. You see the output below:
Stopping nginx: [ OK ]
- Type service nginx start and press Enter. You see the output below:
Starting nginx: [ OK ]
- Type service nginx status and press Enter. You see the output below:
nginx (pid 2878) is running...
- Regenerate the ePO certificates and synchronize them with the Active Response server:
- Open the ePO Console.
- Click Server Settings, Active Response, Edit.
- Scroll to Authentication.
- Select the Authentication option.
- Select the option Regenerate Active Response Certificates.
- Click Save.
- Verify the status of the certificates:
- Return to the Active Response server command line.
- Type ls -l /opt/McAfee/marserver/conf/cert and press Enter.
- View the output below:
-rw-r--r-- 1 mfemar mfemar 3287 Jun 21 11:52 dxlClient.jks
-rwxrwxr-x 1 mfemar mfemar 1144 Apr 10 15:25 generate_certs.sh
-rw-r--r-- 1 mfemar mfemar 1250 Jul 11 07:13 marclient.ca
-rw-r--r-- 1 mfemar mfemar 2661 Jul 11 07:13 marserver.ca
-rw-r--r-- 1 mfemar mfemar 1679 Jun 21 11:52 server.key
You see that the date and time of the certificates is the same as when you regenerated them on the ePO server.
- Verify that the nginx service is running:
- Type chkconfig and press Enter.
- View the output:
- If the output is as shown below:
nginx 0:off 1:off 2:off 3:off 4:off 5:off 6:off
- Type chkconfig nginx on and press Enter.
- Type chkconfig and press Enter.
- View the output:
nginx 0:off 1:off 2:on 3:on 4:on 5:on 6:off
- If the output is as shown below:
nginx 0:off 1:off 2:on 3:on 4:on 5:on 6:off
Continue to the next step.
- Verify whether Active Response is licensed:
- Open the ePO console.
- Open Registered Servers.
- Click Active Response Server, Actions, Edit.
- Click Next.
- Scroll to Active Response License. You see that the Active Response Server is Licensed.
If at any stage this process fails, open a Service Request with Technical Support.
- If you are a registered user, type your User ID and Password, and then click Log In.
- If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.
