Security Compliance
NetApp API Communication Issues with ARM
In this article is explained how to resolve a communication issue between the ARM collector responsible for the NetApp logga and the NetApp.
First published date
Last published date
Overview
- If the NetApp logga shuts off after some minutes of starting it and the following Error log show up in the collector's logs
FPolicyManagerCMode|200622| 8:17:26.311|Error ] FPolicyManagerCMode.Start(String[] name): NetApp.Manage.NaException: Failed invoking API ---> System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Authentication failed because the remote party has closed the transport stream.
- There might be a problem in communication between the Collector and the NetApp.
Product section
Cause
- TLS 1.2 is maybe not enabled on the collector machine as an encryption protocol.
- The certificate of the HTTPS service on the Netapp side is maybe expired.
- A third party firewall is maybe blocking the SSL authentication in the background.
Resolution
- Start the registry editor on the collector machine. We strongly recommend to backup the registry before you proceed with the changes.
- Browse to the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NetFramework\v4.0.30319
- Right-click on the right pane and create a new DWORD (32-bit) Value with Name SchUseStrongCrypto.
- Ensure that the Value data field is set to 1 and the Base is Hexadecimal.
Repeat steps 3 and 4 for the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\.NetFramework\v4.0.30319
- Reboot the collector machine
- Retry to enable the Logga and check if the events are comming by running an FS Logga report on the Netapp shares.
Resolution for cause 2:
- Please renew the related certificate.
- Turn the the Netapp logga Off and then On again in ARM Config---Scans.
Resolution for cause 3:
- Please allow the related communication between the ARM Collector and the Netapp.
- We recommend to have the ARM Collector and the Netapp on the same network segment to avoid such communication issues.