Why am I unable to login to Security Manager after an upgrade, or update to FMOS 9.6 or higher?
The reindex of the system will need to complete prior to system becoming accessible. This also means that logins will not be possible until reindexing is complete. CLI access will still function. This only applies to security manager. For larger environments this can take 24-48 hours. Most environments will complete reindexing within a few hours.
Reindexing is the process by which Firemon will modify and correct issues in the Database table. It will delete invalid data and update tables with valid data to allow firemon to run SIQL queries properly against all customer data.
When running an FMOS health check in 9.6 or higher you may see a message saying that FMOS deployment has failed, and the FMOS health may also show that secmgr, wf and ndexec are down. This message may be misleading as the reindexing may still be completing.
To verify that reindexing is still ongoing use the following command on the application server.
fmos logview -Tf /var/log/firemon/sm/secmgr.log | grep '\(main.*\|rebuild-idx.*\)\(NdEsServiceImpl\|UsageServiceImpl\|SystemUpdateImpl\|RiskServiceImpl\|Lock\)'
If the word "Lock" is present without a message indicating release as shown below then please continue to wait until the reindex is complete before attempting to access the system. Do not restart the system while this process is being completed.
Once the below log is displayed the system should become accessible.
2022-09-06 21:53:58,163 [main ] [INFO ] com.fm.sm.systemupdate.SystemUpdateImpl : Releasing System Update lock