INTEL EMA SERVER ERROR CONNECTION WITH SERVICES DOWN

[dazeusgr]

Hello,

We got a domain user account password rotatated and the Intel EMA since then refuses to connect having the following error

Server Error in '/' Application.
Login failed for user 'IntelEMA'.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Data.SqlClient.SqlException: Login failed for user 'IntelEMA'.

Any ideas?

[dazeusgr]

Stack Trace:

[SqlException (0x80131904): Login failed for user 'IntelEMA'.]
MeshServersCommon.DBCore.HandleCommandCriticalFailureBasic(String commandStr, Exception e, DateTime startTime) +415
MeshServersCommon.DBCore.HandleCommandCriticalFailure(String commandStr, SqlCommand sqlCommand, Exception e, DateTime startTime, Int32 currentRetryCount) +189
MeshServersCommon.DBCore.HandleBaseCommandBlockFinalCheck(String commandStr, SqlCommand sqlCommand, Exception e, DateTime startTime, Int32 currentRetryCount) +107
MeshServersCommon.DBCore.ExecuteBaseCommand(SqlCommand sqlCommand, BaseCommandMode baseCommandMode, String extraWarning) +351
MeshServersCommon.DBCore.ExecuteReaderSql(String storedProcedureName, Nullable`1 commandTimeout, List`1 parameters) +297
MeshServersCommon.MeshDatabase.ExecuteDataTableSql(String storedProcedureName, Nullable`1 commandTimeout, List`1 parameters) +244
MeshServersCommon.code.DB.Repositories.ServerSettingRepository.GetSetting(String name, Int32 type) +282
MeshServersCommon.code.DB.Managers.ServerSettingManager.GetServerSettings(String serverName, Boolean isLoggingEnabled) +377
MeshServersCommon.code.ServerSettings.WebServerPublicSettings.GetServerSettings(Boolean isLoggingEnabled) +61
MeshServersCommon.code.ServerSettings.WebServerSettings.GetServerSettings(Boolean isLoggingEnabled) +20
MeshWebCore.WebApi.Helpers.AuthenticationTools.GetAuthType() +31
MeshWebCore.WebApi.WebApiConfig.Register(HttpConfiguration config) +104
System.Web.Http.GlobalConfiguration.Configure(Action`1 configurationCallback) +66
Website.MvcApplication.Application_Start() +71

[HttpException (0x80004005): Login failed for user 'IntelEMA'.]
System.Web.HttpApplicationFactory.EnsureAppStartCalledForIntegratedMode(HttpContext context, HttpApplication app) +517
System.Web.HttpApplication.RegisterEventSubscriptionsWithIIS(IntPtr appContext, HttpContext context, MethodInfo[] handlers) +185
System.Web.HttpApplication.InitSpecial(HttpApplicationState state, MethodInfo[] handlers, IntPtr appContext, HttpContext context) +168
System.Web.HttpApplicationFactory.GetSpecialApplicationInstance(IntPtr appContext, HttpContext context) +277
System.Web.Hosting.PipelineRuntime.InitializeApplication(IntPtr appContext) +369

[HttpException (0x80004005): Login failed for user 'IntelEMA'.]
System.Web.HttpRuntime.FirstRequestInit(HttpContext context) +532
System.Web.HttpRuntime.EnsureFirstRequestInit(HttpContext context) +111
System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context) +724

[Arun_Intel1]

Hi dazeusgr,

Greetings!

We see that after you have rotated the domain user account password to login to the Intel EMA console, you are getting an error and are unable to login to the Intel EMA console.

Before we proceed, we would like to know the account (local user or Admin account) through which you are trying to login, and if you have tried restarting the services or have performed any other troubleshooting.

And also if you have upgraded the Intel EMA recently which has caused the issue, and please share the version of Intel EMA and the number of endpoints as well.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[dazeusgr]

Hello,

Wehave tried to manually reset the password in the SQL database,

at the local admin account IntelEMA and also the domain one.

Restarting server wont help.

A few demo endpoints

1.14.3 version no updates applied

[dazeusgr]

Would you like more logs? 

If so provide a way to go forward

[Arun_Intel1]

Hi dazeusgr,

Thank you for your reply!

Please find the Intel EMA installation guide for reference, and kindly check if we are missing upon something.

https://www.intel.com/content/www/us/en/content-details/841803/intel-endpoint-management-assistant-intel-ema-server-installation-and-maintenance-guide.html

With that, we see that you are restarting the server however, we are interested in restarting the Services, not the server.

Please share us the Intel EMA logs, from the steps given below:

EMA logs from the Server

Default Path:[System Drive]\Program File(x86)\Intel\Platform Manager\EmaLogs

Please send me the files without the date called:

EMAlog-Webserver.txt

EMAlog-Swarmserver.txt

EMAlog-Ajaxserver.txt

EMAlog-Recoveryserver.txt

EMAlog-Manageabilityserver.txt

And the screen shot of the error while logging into the console, if possible.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[dazeusgr]

https://we.tl/t-QzB3D7pTCz

We transfer link attched.

You will find logs and screenshot of the services and error log on the web panel of the server.

Restarting services didnt help

No LMS service exists

[dazeusgr]

logs attached on internal upload as well

[Arun_Intel1]

Hi dazeusgr,

We would like to inform you that the Intel EMA doesn’t support mixed mode authentication. Instead you may either use AD or Local, however both would not be possible. Also SQL is either using AD, local Windows Auth or SQL passwords.

Additionally we would like to know the Auth that you are using with the DB. 

It would be great if you can change the password back to see if it works? If so, then you may get it running again after which you should be able to change it only in the AD (assuming that you installed EMA with an AD account). 

If not it would probably be easier to just reinstall Intel EMA, since it is a demo / PoC environment not a large production environment.  

Kindly share your observation once done.

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[dazeusgr]

Pasword was vhanged back in the AD.

Also in the database.

The question though arises, wil we have a problem since we already have installed the Certificate for the admin mode of the endpoints? 

Can we reinstall the EMA on the same IIS? 

[Arun_Intel1]

Hi dazeusgr,

There would be no issues to reinstall the Intel EMA server on the same IIS, please find the article given below to back up the Mesh Setting certificate and the Database before reinstalling the Intel EMA as a best practice, please find the article given below for the same.

https://www.intel.com/content/www/us/en/support/articles/000099719/software.html

Thanks and Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[dazeusgr]

Hello Arun,

Except the mesh certificates that are installed during setup we have installed the PKI as well.

Backing up the mesh certs is enough?

If we cant get back to IntelEMA database,installing a new one with the backed up certs only, will any problems occur?

Thanks in advance

[Arun_Intel1]

Hi dazeusgr,

As this is a test environment, therefore we would not require the back up of the mesh settings certificate and the SQL database, where we may go ahead and fresh install Intel EMA from the scratch, for which you may use the same certificate.

Please find the article given below, for Creating a Certificate Chain PFX File for Intel® EMA, you may follow the article from Step 4 and follow the Intel EMA installation guide give below as well:

How to Create a Certificate Chain PFX File for Intel® EMA

https://www.intel.com/content/www/us/en/support/articles/000099677.html

Intel EMA installation guide

https://www.intel.com/content/www/us/en/support/articles/000055629/software/manageability-products.html

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro

[dazeusgr]

Hello Arun,

This wasnt supposed to be a test enviroment, so the customer bought and installed the PKI certificate.

Just for clarificarion, i state again, if we reinstall  EMA on the same server do we need to export the PKI cert or something else BEFORE we proceed with reinstall?

Thanks in advance

[vij1]

Hello dazeusgr,

Before reinstalling EMA on the same server, it is recommended to export the PKI certificate, along with any other critical configuration data. This precaution ensures that you can seamlessly re-import the certificate and restore configurations post-reinstallation, thereby maintaining the security and operational integrity of your EMA setup.

Best regards,

Vijay N

[dazeusgr]

in roder to export the PKI certs we need to follow the procedure on step 4?

[vij1]

Hi dazeusgr,

Yes, you do need to follow the procedure outlined in Step 4 in order to successfully export the PKI certificates.

This step is essential to ensure the certificates are handled and extracted correctly according to the required security protocols.

Best regards,

Vijay N

Intel Customer Support

[Arun_Intel1]

Hi dazeusgr,

Please feel free to revert for any further query!

Thanks & Regards

Arun

Intel Customer Support Technician

[Arun_Intel1]

Hi dazeusgr,

Thank you contacting Intel, please feel free to revert for any further query!

Thanks & Regards

Arun

Intel Customer Support Technician

intel.com/vPro