000027023 - How to shut down or restart the RSA SecurID Appliance 3.0

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000027023
Applies ToRSA SecurID Appliance 3.0
rPath Linux Operating System
RSA Authentication Manager daemons
IssueShut down, or power down, the RSA SecurID Appliance
Restart or reboot the RSA SecurID Appliance
Stop all RSA Authentication Manager services on the RSA SecurID Appliance
shutdown, shut down, power off, power down, restart, reboot
ResolutionHow to shut down or restart the RSA SecurID Appliance 3.0
These steps can be done by using a SSH client, but it is recommended to use a monitor and USB keyboard connected directly to the appliance, and have a bootable Linux CD available, especially if there has been more than 180 days of uptime.
To shut down or restart the Appliance:
  1. Stop all RSA Authentication Manager services.
     
    a. Connect to the Appliance using the console or an SSH client. (For remote access using an SSH client, the Appliance must be enabled for SSH connectivity. For more information, see the RSA Operations Console help.)

    b. Log on to the Appliance using the emcsrv account and the Operating System password. (You created this password when you ran Quick Setup on the Appliance.)

    c. Switch users to root. Run:
      sudo su
        When prompted, enter the Operating System password.
     
    Note: To verify that you are logged on as root, run: whoami


    d. Set the current directory to /usr/local/RSASecurity/RSAAuthenticationManager/server. Run:
      cd /usr/local/RSASecurity/RSAAuthenticationManager/server

    e. Shut down the RSA services. Run: 
      ./rsaam stop oc  
      ./rsaam stop radius  
      ./rsaam stop radiusoc
      ./rsaam stop managed
      ./rsaam stop all         (note: if the system has long uptime or a replication problem, stopping the database server can be very slow)
        /sbin/service lighttpd stop
        /sbin/service raa stop 


    f. Wait for the services to stop, and then check the status to verify that they are stopped. Run:
      ./rsaam status all

    Verify that all services show the status "SHUTDOWN".

    Verify no more java processes are running:
    ps -ef | grep java    
    use kill -9 to stop any that are still running

  2. Run the shutdown command with the appropriate options based on whether you want the Appliance to shut down or restart. The syntax for shutdown is:
    shutdown [-akrhfnc] [-t secs] time [warning message]
     
    For more information on the shutdown command, run:
    help shutdown

    For example, to shut down the Appliance after a 30-second delay, run:
    /sbin/shutdown -h -t 30

    For example, to reboot the Appliance immediately, run:
    /sbin/shutdown -r now

    Note: If prompted, enter the Operating System password.  

NotesThe Appliance 3.0 SP4 (and some patch levels of SP3) includes a button in RSA the Operations Console called Reboot Appliance. Do NOT use this button until you have updated to Service Pack 4 Patch 1 or later.
If it has been more than 180 days since the last fsck file system check, it is triggered on reboot, which takes additional time. It is recommended to use a directly connected monitor and USB keyboard instead of using SSH.
It is also recommend to also have a bootable Linux CD on hand (such as Ubuntu 12 desktop 32-bit) , in case of a problem with fsck . See A46069 for details.
Check the date and time with the date command before rebooting. If it is more than 10 seconds off from real-time, contact RSA before rebooting.
 
Legacy Article IDa43668

Attachments

    Outcomes