Hi

We are experiencing difficulties using a zPDT token to start up RD&T. Steps taken:

• Install RD&T from scratch to a server using RHEL 6.3 as the base Linux os.
• Activated the zPDT token using SecureUpdateUtility and Resourcelink activation process. It seemed to succeed ok.
• The USB stick was then unplugged and plugged back in after few seconds.

Here are the outputs from SecureUpdateUtility, uimcheck and zPDT start:

[root@RDTEST01 bin]# ./SecureUpdateUtility -u HPserv.upw

-------------------------------------------------------------------------------

                       Secure Update Utility

                        Sentinel Keys 1.3.1

         Copyright (C) 2009 SafeNet Inc. All rights reserved.

-------------------------------------------------------------------------------

Success!

Running uimcheck ...

The UIM client is configured in local mode.

UIMCHECK: serial number entry not yet added to local data base.

UIMCHECK: No local errors

CMD : 061313 16:41:00: awsstart devmapA0 --clean
LOG : 061313 16:41:00: AWSSTART:
z1091, version 1-4.45.26.01, build date - 05/24/13 for Linux on RedHat 64bit
LOG : 061313 16:41:00: AWSSTART: Intel-64 architecture
LOG : 061313 16:41:00: AWSSTART: Configuration File-devmapA0
INFO: 061313 16:41:00: STA: AWSSTA204I zPDT started in directory '/home/ibmsys1/z1090/z'.
INFO: 061313 16:41:00: STA: AWSSTA146I Starting independent 1090 instance 'ibmsys1'
CMD : 061313 16:41:00: awsap -p 4224
LOG : 061313 16:41:01: CPU: DEVMAP loaded for EMILY process, RC=159
LOG : 061313 16:41:01: CPU: Creating 3 CPUs
LOG : 061313 16:41:01: CPU: Starting CPUs.
LOG : 061313 16:41:01: CPU: Starting RAS setup
CMD : 061313 16:41:01: sclp_process 0 0 valid
ERR : 061313 16:41:01: EMI: AWSEMI315E zPDTA License Unavailable for CPU 0
ERR : 061313 16:41:01: EMI: AWSEMI315E zPDTA License Unavailable for CPU 1
ERR : 061313 16:41:01: EMI: AWSEMI315E zPDTA License Unavailable for CPU 2
INFO: 061313 16:41:03: EMI: AWSEMI005I Waiting for 1090 license

The token used is a zPDT token. The actual RD&T token is in production use, where we are experiencing issues with network traffic and that is being worked on via a PMR. To aid the problem resolution process, this test environment was built and a loaner token from IBM representative is being tried.

Any suggestions what could be done to get AWSSTART to obtain the license?

Toni

Hi Toni.

Did you run the "z1090instcheck" shell succesfully?

Knud Vraa

Hi,

Yes, it goes successfully.

Teuvo

This is the answer to the query z1090instcheck

-bash-4.1$ z1090instcheck

Checking zPDT prerequisites ....

 For more information about this script, issue : z1090instcheck  -?

 1. REDHAT os level at 6.4 which is
        greater the minimum level                               OK
 2. REDHAT kernel.shmmax of 68719476736 is greater than min.    *NOTE*
        shmmax should be greater than 1.1 times the sum
        of z memory (as specified in your devmap) for
        ALL your 1090 instances.
 3. REDHAT (kernel.shmall * PAGE_SIZE) is 17592186044416
        which is greater/equal to kernel.shmmax which is        OK
 4. REDHAT kernel.msgmni of 7649 is greater than min.   OK
 5. REDHAT kernel.msgmax is 65536 which is                      OK
 6. REDHAT kernel.msgmnb is 65536 which is                      OK
 7. REDHAT net.core.rmem_default is 1048576 which is            OK
 8. REDHAT net.core.rmem_max is 1048576 which is                        OK
 9. REDHAT kernel.core_uses_pid is 1 which is                   OK
10. REDHAT kernel.core_pattern is core-%e-%p-%t which is                OK
11. REDHAT ulimit -c is set to unlimited                                OK
12. REDHAT ulimit -d is set to unlimited                                OK
13. REDHAT rpm libstdc++-(i686) is installed            OK
14. REDHAT sntl-sud-7.5.2-0.i386 rpm is greater than required   OK
15. REDHAT zpdt-shk-server-1.3.1.2-0.i586 rpm is equal to required level        OK
16. REDHAT dmidecode-2.11-2.el6.x86_64 rpm is greater than required     OK
17. REDHAT rpm beagle is not installed which is                 OK
18. REDHAT rpm zmd is not installed which is                    OK

Running uimcheck ...

The UIM client is configured in local mode.

UIMCHECK: serial number entry not yet added to local data base.
UIMCHECK: No local errors

I know this has been discussed before, but have you tried to rename the uim database files before trying to start AWSSTART? I have seen timing issues etc if you change the token on the server, so try to rename the 2 UIM files before starting AWSSTART.

They are usually located in /usr/z1090/uim and called :
   uimclient.db

   .uimclient.dk.lock

/Flemming

Toni,

There are a number of things that could cause you to be unable to obtain a license.  
--Are you sure that the token plugged is a RDzD&T token and you are using a z1091 driver ?
--Verify  the serial number on the token matches was was used to get the update file you obtained from Passport Advantage  
--The fact that SecureUpateUtility gave you the  "Success!" indicates that the token processes where running but let's check:
----issue :   ps -ef  |grep usbdaemon | grep -v grep     and you should see a process running for /opt/safenet_sentinel/common_files/sentinel_usb_daemon/usbdaemon
----issue :   ps -ef  |grep Sntl  |grep -v grep                   and  verify you see a process running for ./SntlKeysSrvrlnx
--Verify that Linux sees the token
----issue :   lsusb | grep Rain                   and  verify that a response is returned for "Rainbow Technologies, Inc"
--As mentioned in the previous post, you could delete the uim files, by issuing  : rm  /usr/z1090/uim/*
--verify the the default ports are being listen to:
----netstat -an | grep 9450 | grep LISTEN                    and verify that port  9450 is LISTEN   mode

When debugging token issues , I use a simple devmap such as the following to keep the problem simple. It is just a system stanza .
[system]
memory 0512m
expand 256m
processors 0001
3270PORT 3270

You can start up zPDT with this devmap and then provide the output of command : token

Just curious Did zPDT run successfully on this machine before or it this the first time it is being tried ?
You could send your results of the above inquiry to z1090@us.ibm.com where we can investigate and provide further assistance .

Keith

Keith

The token is not a RD&T token. Therefore the license has not been generated in Passport Advantage / License Key Center. It is a zPDT token, so the license was activated via Resourcelink. The reason for this zPDT token is explained in the last paragraph of my opening post.

Other tests will need to be performed onsite, and I cannot do that right now. We will provide the other results tomorrow.

Thanks!

Toni

Toni,

What is the driver you are using ? ( rpm -qa  |grep z109 )    If it is z1091, you need a z1091 token. You can not run z1091 code with a z1090 token and vise versa ( you can not run z1090 code with a z1091 token) . This was a change to our GA4 code at 45.26.01. This would result in not getting a license.

Keith

rpm query shows z1091:

rpm -qa  |grep z109

[root@RDTEST01 ~]#  rpm -qa  |grep z109
z1091-1-4.45.26.01.x86_64
 

Thanks Keith!

z1091 driver was being used. Now that it was changed to z1090 driver, awsstart works fine.

Toni