Hi All! Well, it looks like I am back among the living (for the most part). The database has been clean up and I am collecting events like I should be. In the sensor_ctl.log I have a number of entries that I am having trouble intrepreting. So far I have figured out that the key have this format:
rs_eng_<APP_SERVER_NAME>_239.PubKey Where <SERVER_NAME> is the name of the machine with the Application Server and NOT the with the Sensor. Is this correct? If so, then many of these error message are waaaaay off. The App Server is nts-app-21. So there should be no reason that the system is trying to send the Event Collector key key rs_eng_sol-sys-02_root_239.PubKey to a sensor. Sol-sys-02 and sol-sys-03 are just machines with a sensor on it, so there should be no reason to send a key to the machine 192.168.204.11, right? (192.168.204.11 is a machine with a server sensor on it). Another problem is that sol-sys-02 is listed under "ungrouped assets), but does not have an sensor assigned to it. (plus the software is not even installed on the machine) So why is the system even trying to send the key file? Note that there are key files in \Keys\CerticomNRA: rs_eng_sol-sys-02_root_239.PubKey rs_eng_sol-sys-03_root_239.PubKey The way I understand it is that these should only exist on the sensors (KB Answer 371: You never copy the Sensor keys to any other machine). So, the key files should not be here, right? What's the difference between Keys\CerticomNRA and KEYS\RSA? Any help is greatly appreaciated. Regards, Jim Mohr [Thread-1] ERROR - [EMAIL PROTECTED](#8)] Failed to send encrypted key CerticomNRA\rs_eng_nts-app-21_239.PubKey to [EMAIL PROTECTED] The system cannot find the path specified. [ID=0xc721000b]. [Thread-1] ERROR - [EMAIL PROTECTED](#8)] Failed to send encrypted key CerticomNRA\rs_eng_sol-sys-02_root_239.PubKey to [EMAIL PROTECTED] The system cannot find the path specified. [ID=0xc721000b]. [Thread-1] ERROR - [EMAIL PROTECTED](#8)] Failed to send encrypted key CerticomNRA\rs_eng_sol-sys-03_root_239.PubKey to [EMAIL PROTECTED] The system cannot find the path specified. [ID=0xc721000b]. _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo
