Security Compliance

NetApp API Communication Issues with ARM

In this article is explained how to resolve a communication issue between the ARM collector responsible for the NetApp logga and the NetApp.

First published date

7/21/2020 7:11 PM

Last published date

1/2/2025 10:19 PM

Overview

  • If the NetApp logga shuts off after some minutes of starting it and the following Error log show up in the collector's logs
FPolicyManagerCMode|200622| 8:17:26.311|Error ] FPolicyManagerCMode.Start(String[] name): NetApp.Manage.NaException: Failed invoking API ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
  • There might be a problem in communication between the Collector and the NetApp.

Product section

Access Rights Manager

Cause

There can be various causes as listed below.
  1. TLS 1.2 is maybe not enabled on the collector machine as an encryption protocol.
  2. The certificate of the HTTPS service on the Netapp side is maybe expired.
  3. A third party firewall is maybe blocking the SSL authentication in the background.

Resolution

Resolution for cause 1:

 
  1. Start the registry editor on the collector machine. We strongly recommend to backup the registry before you proceed with the changes.
  2. Browse to the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v4.0.30319
  3. Right-click on the right pane and create a new DWORD (32-bit) Value with Name SchUseStrongCrypto.
  4. Ensure that the Value data field is set to 1 and the Base is Hexadecimal.

Repeat steps 3 and 4 for the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NetFramework\v4.0.30319

  • Reboot the collector machine
  • Retry to enable the Logga and check if the events are comming by running an FS Logga report on the Netapp shares.

Resolution for cause 2:

  • Please renew the related certificate.
  • Turn the the Netapp logga Off and then On again in ARM Config---Scans.

Resolution for cause 3:

  • Please allow the related communication between the ARM Collector and the Netapp.
  • We recommend to have the ARM Collector and the Netapp on the same network segment to avoid such communication issues.