000031066 - Export failed to complete when using the RSA Authentication Manager 6.1 RADIUS Export Utility

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000031066
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 6.1
Platform: Windows/Linux

The RSA Authentication Manager 6.1 RADIUS Export Utility installs successfully, but exporting the RADIUS data fails giving the below error:

[FAILED] Export failed to complete
Unable to export RADIUS clients:null
[FIX]Please make sure RADIUS server is running

CauseThe RSA Authentication Manager 6.1 RADIUS Export Utility is not able to connect to the primary RADIUS server due to any of the below:
  • The RADIUS services may not be running on the primary server.
  • An incorrect primary server IP address is getting passed on to the RADIUS Export Utility.

  1. Make sure that the RSA RADIUS Server service is running.

    On a Windows Authentication Manager 6.1:


      From the Start Menu select All Programs > RSA Security > RSA Authentication Manager Control Panel > Start & Stop RSA Auth Mgr Services.



      Confirm the RSA RADIUS Server has a status of Running.



      If the status of RSA RADIUS Server is not running, click on the Start RADIUS button. If the Start RADIUS button is greyed out, uncheck the option to start and stop RADIUS server together with authentication engine first then click Start RADIUS.  Once RADIUS is started, close the Control Panel.


    On a Linux Authentication Manager 6.1:


      Logon to the primary Authentication Manager server, either through SSH or a direct console connection.



      Change to the root user.



      Run the below command to start the RADIUS daemon:


      /etc/init.d/sbrd start


  2. If the RSA RADIUS Server is already started, or exporting the data is still failing with the same error after restarting it, an incorrect IP address is getting passed to the RADIUS Export Utility. To fix this, edit the exportRadiusData.bat file to force the correct primary server IP address using the below steps:


      Run the patchRemoteAdmin.bat and install the RSA Authentication Manager 6.x RADIUS Export Utility.



      Open the folder "<AM_INSTALL_DIR>\prog\radius\Admin" on the same server where the RSA Authentication Manager 6.1 RADIUS Export Utility is installed, where <AM_INSTALL_DIR> is the path defined as the installation directory of the RSA Authentication Manager Remote Database Administration client when running the patchRemoteAdmin.bat (e.g. C:\Program Files\RSA Security\RSA Authentication Manager\prog\radius\Admin).



      Open exportRadiusData.bat using any text editor (e.g. Notepad, Wordpad, preferably Notepad++).



      Replace the %* in the very last line with <primary_server_ip> %2 %3. That is, If the correct IP address for the primary server is, then it should look like the following:


      Before editing:


      start /min jre\bin\java -Dfile.encoding=UTF-8 -Dsun.jnu.encoding=UTF-8 -cp
        com.rsa.authmgr.internal.radius.migration.ace61.ExportACE61RADIUSSwingApp %*


      After editing:


      start /min jre\bin\java -Dfile.encoding=UTF-8 -Dsun.jnu.encoding=UTF-8 -cp
        com.rsa.authmgr.internal.radius.migration.ace61.ExportACE61RADIUSSwingApp %2 %3



      Save and close the file.



      If logged directly onto the primary server, from the Start Menu select All Programs > RSA Security > RSA Authentication Manager Host Mode. If you are using Remote Administration, from the Start Menu select All Programs > RSA Security > RSA Authentication Manager Remote Mode and authenticate with a passcode, tokencode or a fixed password.



      Try exporting again by selecting RADIUS > Manage RADIUS Server > Generate Package.