Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.

xhtml error) 13/08/18, 11(23 a. m.

Avaya Support Website Help

(index? Subscribe (index? (index? Printable version (index?

page=subscribe_toggle&return=content&type=CONTENT&id=SOLN201674&viewlocale=null) page=subscribe_toggle&return=content&type=CONTENT&id=SOLN201674&viewlocale=null) page=content&id=SOLN201674&pmv=print&impressions=false) page=content&id=SOLN201674&pmv=print&impressions=false) page=mailpage

Avaya Aura System Manager 6.x, 7.x : How to renew expired

certificates (if SMGR webpage will not load, white screen,
/pages/Welcome.xhtml error)
(#rate) Rate this Page (#rate)

Doc ID: SOLN201674

Version: 229.0
Status: Published
Published date: 08 Jun 2017
Updated: 06 Aug 2018
Author: ahmed1

Details
SMGR 6.1.x | 6.2.x | 6.3.x | 7.x
Error reading 'model' on type com.avaya.mgmt.console.framework.bean.ClientNavigationTree_$$_javassist_seam_6
Some internal error has occurred in the service. Please contact support team.

Problem Clarification
System Manager: Cannot login the web interface with admin user
System Manager: Unable to access web interface
System Manager: The web interface is not loading
System Manager: How to renew certificates
System Manager: Certificate expired
System Manager: Certificates expired on System Manager
System Manager: Not able to access web interface. Get certificate error.
System Manager: can't access the SMGR via web
System Manager: Some internal error has occurred in the service. Please contact the support team.
System Manager: no WEB administration but SSH OK
System Manager 5.2.x, 6.0.x, 6.1.x, 6.2.x, 6.3.x Utility Certificate Renewal Guide

The certificates on System Manager 6.3 and earlier versions expire after 2 years. This guide explains how to determine if your certificates are expired and how to
renew them.

The procedure is applicable for System Manager 6.3.x too. The utility to renew the expired System Manager certificate was written for versions 6.1 and 6.2 but
applicable on 6.3 as well.

This issue may also be reported as:

Unable to login to SMGR.

SMGR certificates expired.
System Manager certificates expired.
ERROR when logging in /pages/Welcome.xhtml@70,67 value="":Error reading 'model' on type
com.avaya.mgmt.console.framework.bean.ClientNavaigationTree_$$_javassist_seam_6.
System Manager certificate renewal.
System Manager backup fails.
PSN003661u.
System Manager blank page.
Cannot reach EM web page from SMGR UCM: Web3610: An internal error has occurred! Severity: Major.
Cannot access Software Deployment from UCM.
All data missing from SMGR (when logging in as an LDAP user).
The Web Server X509 certificate is expired.
DRS_DBG_004 events observed, caused by cert being expired and unable to sync SMGR to ASM.
Callers to AAM Aura Messaging hear busy

FAQ:
Q - Is renewing the System Manager certificates Service affecting?
A - Not call affecting but you will be unable to access System Manager while this process is being completed. System Manager is an administration web interface for
a number of Avaya products so you will be unable to use System Manager to administer those systems while the certificates are being updated.
Q - Will Avaya update my certificates for me?

A - To some extent this depends on your support contract but usually Avaya will NOT perform this work free of charge. This is a customer installable PSN and
certificate expiry is part of the normal lifecycle of the product. If you have a problem installing the certificates and a valid support contract then of course support will
assist with your issue.
Q - I am having trouble downloading the utility where can I get some help?

A - You can find the contact details for PLDS support for your region here https://support.avaya.com/contact/ (https://support.avaya.com/contact/)
Q - Does System Manager send out an alarm when my certificates expire or are about to expire?
A - This feature has been added to System Manager 6.2 by default at 90, 60, and 30 days minor, major and critical respectively.

Q - Will installing a Service Pack update my certificates?

A - No however upgrading to a new release for example 6.0 to 6.1 or 6.1 to 6.2 or 6.2 to 6.3 will. This will only work however if the certificates have not already
expired, you must not try to upgrade / install a service pack while you have expired certificates
Have my System Manager certificates expired?

The first step is to confirm if you are affected by this problem or not. You may have one of the more obvious symptoms like if this is presented on login below. if you
have this error then your certificates have expired. The below error is for system manager with version 6.0.x with no login possible into UI at all.

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 1 de 7
Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.xhtml error) 13/08/18, 11(23 a. m.

The below error is for system manager with version 6.1.x Same error occurs on 6.2.x

The text of this error to make it searchable is:

/pages/Welcome.xhtml @70,67 value="": Error reading 'model' on type com.avaya.mgmt.console.framework.bean.ClientNavaigationTree_$$_javassist_seam_6.
Also error message: Some internal error has occurred in the service. Please contact support team.

To be 100% sure that the certificate has expired, check the certificate itself to see its expiry date. In the address bar of your web browser there will be a pictogram
which looks like a padlock. It is to the left of the "https" address in Chrome and Firefox and to the right in Internet Explorer. If the web browser cannot verify the origin of
the certificate because it was issued by a 3rd party non-trusted Certificate Authority (just like Avaya's internal CA), then Chrome will put a red X on the padlock. IE in
this case will display a "Certificate Error" button to the right of the address bar. Please note, the "Certificate Error" button does not mean that the certificate has
expired.
In order to open the certificate, click on the pictogram of the padlock (or on the "Certificate Error" button in IE), then do the following depending on which browser you
are using:

· Chrome: click on "Certificate Information".

· Firefox: click on "More Information" then "View Certificate".

· IE: click on "View Certificate".

Finally, the certificate will show up and you can read the validity information on the General tab:

If you are able to log into the SMGR, you can confirm if you are affected by going to Application Management > System Manager > Tick System Manager > More
Actions > Configure Identity Certificates as shown in the screenshot below:

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 2 de 7
Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.xhtml error) 13/08/18, 11(23 a. m.

Where to find the certificates.

This will display all the System Manager certificates, in the screenshot below the certificates are not expired. If any of the certificates are expired you will need to run
the certificate renewal utility.

View certificates

Also take note if the Certificates are near to expiry as if the certificates do expire you may be unable to access your System Manager or administer your Session
Manager.

NOTE: The WebLM Legacy certificate is not used within SMGR so this particular certificate may show as expired without actually causing any problems

NOTE 2: If the certificates are not expired yet, then all you need to do is just select the certificate from the above list and then click on the Renew button on the top left
corner. This way you do not need to use the Certificate Renewal Utility tool. After you renewed all the certificates, you need to restart the jboss service.

Cause

Certificate expired.
Why has this happened?

The Certificates in your System Manager were made valid for 2 years from the installation date. If you have upgraded your System Manager to a new major release
since then the certificates will have been extended by 2 years at that time.

Certificates cannot be made valid indefinitely so there has to be an expiry date. Once this expiry date has passed you must renew your certificates.

This is part of the normal lifecycle of the product.

In the case of System Manager 6.3.x, the certificates should renew automatically. There is a bug in the renewal process on versions older than 6.3.10 where some of
the certificates do not automatically renew.. In order to fix this bug, the System Manager and Session Manager servers have to be upgraded to the latest version -
6.3.16 at the time of writing this update to the article (05-Feb-2016).

Solution
My Certificates have expired. How do I correct this?

Summary Instructions:

If you are comfortable installing this PSN simply use the published information in the PSN below.

Renewal of expired or about to expire certificates of Avaya Aura® System Manager https://support.avaya.com/css/P8/documents/100159923
(https://support.avaya.com/css/P8/documents/100159923) .

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 3 de 7
Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.xhtml error) 13/08/18, 11(23 a. m.

The Cert Renewal Utility can be executed for following releases 5.2.x , 6.0.x , 6.1.x and 6.2.x, 6.3.x Releases.

You can get the renewal utility certificate at the following location.

Certificate Renewal Utility (https://plds.avaya.com/poeticWeb/avayaLogin.jsp?ENTRY_URL=/esd/viewDownload.htm&DOWNLOAD_PUB_ID=SMGR5260611)

Detailed Instructions:

If you would like a step by step walkthrough of what to do please follow these instructions:

1. Download the Certificate renewal utility from PLDS

You can get the renewal utility from PLDS at the following location.

Certificate Renewal Utility (https://plds.avaya.com/poeticWeb/avayaLogin.jsp?ENTRY_URL=/esd/viewDownload.htm&DOWNLOAD_PUB_ID=SMGR5260611)

Log into the system and download the file, save it somewhere on your local system.

If you are not able to log into PLDS or need some help downloading the file please contact PLDS support. You can find contact details for your region here:
support.avaya.com/contact/ (https://support.avaya.com/contact/)

2. Getting the CertificateRenewalUtility.bin file onto the System Manager

Use a program like winSCP to push the file to the System Manager server. Open winSCP and enter your System Manager credentials into the program as shown
below. The default user is admin and default password is also admin.

Select directories from the menu on the left and enter /tmp/ into the remote directory field as shown below.

Click login, if you are prompted to accept a key accept it, you should then be presented with the tmp directory.

You can then simply drag and drop the CertificateRenewalUtility.bin file into the /tmp directory

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 4 de 7
Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.xhtml error) 13/08/18, 11(23 a. m.

3. Running the Cert Renewal Tool

Open putty and enter your System Manager IP and click open

4. Running the Certificate Renewal Utility

Log in as the admin user, the default password is admin

Enter the command:

su - root

The default password is root01

Change to the /tmp directory with the command:

cd /tmp

Check the file in the /tmp/ directory with the command:

ls

This should show the CertificateRenewalUtility.bin file that you need as shown below.

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 5 de 7
Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.xhtml error) 13/08/18, 11(23 a. m.

Now we are going to start the certificate renewal utility, this will prevent access to your System Manager GUI but will not affect call processing.

Enter the command:

sh CertificateRenewalUtility.bin (make sure you are the root user, DO NOT run this as any other user) or use command:

#./CertificateRenewalUtility.bin (See above, make sure you are root user)

The certificate renewal utility will then run and will display the expiry date of your certificates. You should then answer 'y' to apply the patch and renew the certificates
for a further 2 years. This process will take about 10 minutes or so....DO NOT stop the service in mid process. Also, when this is done, The SMGR services will
restart, this may take up to 15 minutes so do not tests until sufficient time has passed.

NOTE: If you decide you don't want to renew the certificates, then answer 'n' to back out and cancel the renewal.
Once this is complete you can repeat the steps listed above to check the certificates are renewed, but answer 'n' when prompted to install the patch.
If the Certificate Renewal Utility fails to run please raise an SR with Avaya support.

http://support.avaya.com
5. Check Session Manager Certificates

If your System Manager Certificates are expired there is a good chance your Session Manager Certificates are also expired.
See this PSN https://support.avaya.com/css/P8/documents/100157898 (https://support.avaya.com/css/P8/documents/100157898) for details of how to check and re-new your Session Manager
Certificates.

Detailed Article on Session Manager certificate Updates https://support.avaya.com/kb/ext/ADMN112769

***Note:- Make sure you are logged in as root to run this certificate renewal utility. Running this as the admin user or any other user will create issues***

***NOTE: Make sure after successfully renewing the Session Manager certificates that you complete a reboot. This is to ensure that the freshly renewed certificates
are picked up by their associated processes (Web Sphere)**

Attachment File
SMGR6x7x_Renew_Cert.pdf (/resources/sites/AVAYA/content/live/SOLUTIONS/201000/SOLN201674/en_US/SMGR6x7x_Renew_Cert.pdf)
559K • 2 minute(s) @ 56k, < 1 minute @ broadband

+ Additional Relevant Phrases

Please rate this article

RATE CONTENT

Avaya -- Proprietary. Use pursuant to the terms of your signed agreement or Avaya policy

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 6 de 7
Avaya Support - Knowledge Base InQuira InfoCenter - Avaya Aura …ebpage will not load, white screen, /pages/Welcome.xhtml error) 13/08/18, 11(23 a. m.

About Avaya Contacts Careers Site Map Terms of Use Privacy Statement
© 2018 Avaya Inc.

https://support.avaya.com/ext/index?page=content&id=SOLN201674&group=UG_ENTITLED_CUSTOMER Página 7 de 7