Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Network Configuration Manager (NCM) > Web Console performance is much slower after installing NCM 7.0

Web Console performance is much slower after installing NCM 7.0

Table of contents
Created by Interspire Import, last modified by MindTouch on Jun 23, 2016

Views: 19 Votes: 0 Revisions: 9

Overview

Windows Server 2003

 

Symptoms:

  • NCM web pages load extremely slowly, and sometimes cause a timeout
  • Application event log is full of crypt32 errors like:

Type

Source

Message

Error

crypt32

Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.

To verify that the issue is related to certificate based authentication, look for crypt32 errors in the Event Viewer: Application (Administrative Tools > Event Viewer)

 

 

 Windows Server 2008

 

Symptoms:

  • NCM web pages load extremely slowly and sometimes  cause a timeout
  • Application event log is full of Microsoft-Windows-CAPI2 errors like:

Type

Source

Message

Error

Microsoft-Windows-CAPI2

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

To verify that the issue is related to certificate based authentication, look for CAPI2 errors in the Event Viewer: Application (Administrative Tools > Event Viewer)

Solution

Windows Server 2003

Turn off Automatic Root Certificates Update. To do so as a member of the local Administrators group:

  1. On the NPM server, in Control Panel, double-click Add/Remove Programs.
  2. Click Add/Remove Windows Components.
  3. Click to clear the Update Root Certificates check box, and continue with the Windows Components Wizard.


Note:

  • If you are using domain policy groups, you must also disable automatic root certificate updates for the appropriate domain policy group.


 

On Windows Server 2008

Turn off Automatic Root Certificates Update. To do so as a member of the local Administrators group:

  1. On the NPM server, click Start, and click Run.
  2. Type "gpedit.msc", and click OK.
  3. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  4. Double-click Administrative Templates, double-click System, double-click Internet Communication Management, and then click Internet Communication settings.
  5. Double-click Turn off Automatic Root Certificates Update, click Enabled, and click OK.
  6. Close the Local Group Policy Editor.
  7. Click Add/Remove Windows Components.
  8. Click to clear the Update Root Certificates check box, and continue with the Windows Components Wizard.


Note:

  • If the machine is part of domain, the policy needs to be turned off on domain level. 
  • If the policy fails to turn off, or an ins error appears in the event log after the policy turns off, NCM has no control and Microsoft support would have to fix that issue.
Last modified
21:34, 22 Jun 2016

Tags

Classifications

Public