NetBackup IT Analytics Data Collector Installation Guide for Fabric Manager
- Fabric Manager Data Collection overview
- Pre-Installation setup for Brocade switch
- Pre-Installation setup for Cisco switch
- Pre-Installation setup for Brocade Zone alias
- Pre-Installation setup Cisco Zone alias
- Installing the Data Collector software
- Validating Data Collection
- Uninstalling the Data Collector
- Manually starting the Data Collector
- Appendix A. Firewall configuration: Default ports
Upgrade troubleshooting: Brocade BNA SMI-S (CIM) server and Java 11
With the introduction of support for Java 11, older versions of Brocade BNA may encounter compatibility issues. The following section covers potential workarounds. Collection occurs from the SMI-S (CIM) server component of the BNA the data collector is collecting from. The version of Java used by NetBackup IT Analytics disables some insecure TLS algorithms by default. If collection fails with the following error in the collector logs, the version of Brocade BNA may be incompatible and not allow collection using the TLS algorithms enabled by default with Java 11.
Failed to establish JDBC connection to: jdbc:jtds:sqlserver://... java.sql.SQLException: Network error IOException: null at net.sourceforge.jtds.jdbc.JtdsConnection.<init> (JtdsConnection.java:437)
Upgrade Brocade BNA to the latest version to enable secure collection. If upgrade is not possible, a workaround can be attempted to restore compatibility. If the following steps do not resolve the issue, your version of Brocade BNA is not supported.
Edit <collector install dir>/java/conf/security/java.security.
Search for jdk.tls.disabledAlgorithms.
Copy the existing lines and comment (to have a backup for easy restore).
#jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ # EC keySize < 224, 3DES_EDE_CBC, anon, NULL jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ EC keySize < 224, 3DES_EDE_CBC, anon, NULL
One at a time, remove an algorithm from the jdk.tls.disabledAlgorithms and test the collection, starting at the last algorithm and working backward. Stop once you reach an algorithm containing 'keySize <'.
Remove one algorithm - for example NULL
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \ EC keySize < 224, 3DES_EDE_CBC, anon
Save the file.
Run checkinstall and verify collection succeeds.
If checkinstall does not succeed, restore jdk.tls.disabledAlgorithms to its original state.
Change to DH keySize<768 - for example.
jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 768, \ EC keySize < 224, 3DES_EDE_CBC, anon, NULL
Save the file.
Run checkinstall and verify collection succeeds.
If a working configuration is found, restart the collector service.