ATA Services not starting

%3CLINGO-SUB%20id%3D%22lingo-sub-177325%22%20slang%3D%22en-US%22%3EATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177325%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%202%20DC%20controllers%20running%20in%20Azure%20connected%20to%20On-Prem%20domain%20with%20on-prem%20DC.%20The%20On-prem%20DC%20are%20Lightweight%20gateway%20are%20running%20fine%20but%20the%202%20DC%20in%20IaaS%20(Azure%20cloud%20)%20are%20not%20working%20Service%20status%20stopped.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EError%20in%20the%20Gateway%20Log%20folder%20for%20Both%20DC's%20in%20the%20cloud%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EError%20%5BWebClient%2B%3CINVOKEASYNC%3Ed__8%601%5D%20System.Net.Http.HttpRequestException%3A%20PostAsync%20failed%20%5BrequestTypeName%3DUpsertGatewayMonitoringAlertRequest%5D%20---%26gt%3B%20System.Net.Http.HttpRequestException%3A%20An%20error%20occurred%20while%20sending%20the%20request.%20---%26gt%3B%20System.Net.WebException%3A%20The%20request%20was%20aborted%3A%20Could%20not%20create%20SSL%2FTLS%20secure%20channel.%3CBR%20%2F%3E%20at%20System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult%20asyncResult%2C%20TransportContext%26amp%3B%20context)%3CBR%20%2F%3E%20at%20System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult%20ar)%3C%2FINVOKEASYNC%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eplease%20advise%20how%20i%20can%20solve%20this%20problem.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-177325%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdvanced%20Threat%20Analytics%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217887%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217887%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20notice%20within%20the%20ATA%20center%2C%20the%20LG%20keeps%20complaining%20the%20service%20stating%20says%20starting%2C%20to%20me%20this%20is%20an%20issue%20afterall%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217886%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217886%22%20slang%3D%22en-US%22%3E%3CP%3EI%20also%20notice%20within%20the%20ATA%20center%2C%20the%20LG%20keeps%20complaining%20the%20service%20stating%20says%20starting%2C%20to%20me%20this%20is%20an%20issue%20afterll%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217878%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217878%22%20slang%3D%22en-US%22%3EThanks%20for%20taking%20the%20time%20to%20reply%20Praful.%20Reading%20deeper%2C%20my%20issue%20is%20actually%20different%20and%20we%20are%20already%20fully%20up%20to%20date.%20Thanks%20anyway%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217867%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217867%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20yes%20the%20fix%20was%20to%20update%20the%20agent%20on%20the%20affected%20machines%20and%20the%20ata%20server%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-217839%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-217839%22%20slang%3D%22en-US%22%3EDid%20you%20manage%20to%20resolve%20this%20in%20the%20end%3F%20We're%20experiencing%20the%20exact%20same%20issue.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177396%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177396%22%20slang%3D%22en-US%22%3E%3CP%3E%3CBR%20%2F%3EOK%2C%3C%2FP%3E%0A%3CP%3EThen%20we%20rolled%20out%20%22known%20issues%22.%3C%2FP%3E%0A%3CP%3EI%20strongly%20suggest%20at%20this%20point%20to%20open%20a%20case%20with%20support%20and%20have%20a%20support%20engineer%20on%20it%3C%2FP%3E%0A%3CP%3Eto%20collect%20more%20data%20and%20help%20troubleshoot.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177386%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177386%22%20slang%3D%22en-US%22%3E%3CP%3Eokay%20i%20have%20checked%20all%20the%20updater%20logs%20and%20i%20performed%20a%20search%20for%20the%20following%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EClient%20certificate%20doesn't%20exist%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3ENothing%3CSPAN%3E%26nbsp%3Bwas%20found%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177382%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177382%22%20slang%3D%22en-US%22%3E%3CP%3Ethere%20are%203%20updater%20logs%20m%20which%20one%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177380%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177380%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20you%20check%20the%20Updater%20log%20and%20see%20if%20you%20have%20a%20line%20with%20this%20exact%20text%20inside%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3BWarn%26nbsp%3B%20%5BOwinContextExtension%5D%20Sending%20retry%20request%20%5BClient%20certificate%20doesn't%20exist%5D%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177375%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177375%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20correct%20the%20LGW%20are%20talking%20to%20the%20same%20ATA%20center.%3C%2FP%3E%0A%3CP%3EThe%20error%20was%20certificate%20error%20via%20IE%20stating%20it%20not%20secure%20etc%20but%20this%20can%20be%20ignored%20as%20i%20can%20log%20on%20to%20the%20console%20successfully%20from%20LGW's%20servers%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177370%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177370%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20LWGWs%20are%20talking%20to%20the%20same%20endpoint%20you%20are%20reaching%20when%20using%20IE%2C%3C%2FP%3E%0A%3CP%3Eonly%20they%20are%20less%20tolerant%20to%20issues.%3C%2FP%3E%0A%3CP%3EWhat%20was%20the%20exact%20error%20you%20got%20about%20the%20certificate%20in%20IE%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177338%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177338%22%20slang%3D%22en-US%22%3E%3CP%3Ethe%20certificate%20issue%20is%20not%20an%20issue%2C%20i%20would%20like%20to%20fix%20the%20Light%20weight%20gateway%20servers..thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177336%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177336%22%20slang%3D%22en-US%22%3E%3CP%3Ei%20am%20running%20Ver%201.8%20ATA%20Center%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177335%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177335%22%20slang%3D%22en-US%22%3E%3CP%3EYes%20i%20can%20-%20I%20added%20the%20ATA%20console%20via%20IE%20trusted%20site%20but%20i%20see%20certificate%20error%20in%20the%20browser.%20I%20installed%20the%20certificate%20for%20local%20user%20and%20current%20user.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177332%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177332%22%20slang%3D%22en-US%22%3E%3CP%3EAre%20you%20able%20to%20access%20the%20console%20UI%20from%20the%20failing%20GWs%20using%20Internet%20Explorer%20without%20any%20errors%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177330%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177330%22%20slang%3D%22en-US%22%3E%3CP%3Ethanks%20for%20you%20reply.%3C%2FP%3E%0A%3CP%3Ethe%20registry%20keys%20weren't%20present%20on%20the%20failing%20servers%20and%20ATA%20center.%20However%20i%20have%20tried%20doing%20this%20as%20i%20read%20your%20article%20and%20no%20luck%20here%20-thanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-177327%22%20slang%3D%22en-US%22%3ERe%3A%20ATA%20Services%20not%20starting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-177327%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20you%20check%20if%20you%20have%20any%20of%20the%20following%20registry%20keys%20set%20on%20the%20failing%20machine%20or%20the%20center%3F%3C%2FP%3E%0A%3CP%3E%5BHKEY_LOCAL_MACHINE%5CSYSTEM%5CCurrentControlSet%5CControl%5CSecurityProviders%5CSCHANNEL%5D%3CBR%20%2F%3E%22DisableRenegoOnServer%22%3Ddword%3A00000001%3CBR%20%2F%3E%22DisableRenegoOnClient%22%3Ddword%3A00000001%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20yes%2C%20please%20try%20while%20they%20are%20set%20to%200%20(default).%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Deleted
Not applicable

I have 2 DC controllers running in Azure connected to On-Prem domain with on-prem DC. The On-prem DC are Lightweight gateway are running fine but the 2 DC in IaaS (Azure cloud ) are not working Service status stopped.

 

Error in the Gateway Log folder for Both DC's in the cloud

 

Error [WebClient+<InvokeAsync>d__8`1] System.Net.Http.HttpRequestException: PostAsync failed [requestTypeName=UpsertGatewayMonitoringAlertRequest] ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The request was aborted: Could not create SSL/TLS secure channel.
at System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult, TransportContext& context)
at System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult ar)

 

please advise how i can solve this problem.

 

 

 

17 Replies
Highlighted

Can you check if you have any of the following registry keys set on the failing machine or the center?

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
"DisableRenegoOnServer"=dword:00000001
"DisableRenegoOnClient"=dword:00000001

 

If yes, please try while they are set to 0 (default).

Highlighted

thanks for you reply.

the registry keys weren't present on the failing servers and ATA center. However i have tried doing this as i read your article and no luck here -thanks

Highlighted

Are you able to access the console UI from the failing GWs using Internet Explorer without any errors?

Highlighted

Yes i can - I added the ATA console via IE trusted site but i see certificate error in the browser. I installed the certificate for local user and current user. 

Highlighted

i am running Ver 1.8 ATA Center

Highlighted

the certificate issue is not an issue, i would like to fix the Light weight gateway servers..thanks

Highlighted

The LWGWs are talking to the same endpoint you are reaching when using IE,

only they are less tolerant to issues.

What was the exact error you got about the certificate in IE?

Highlighted

Yes correct the LGW are talking to the same ATA center.

The error was certificate error via IE stating it not secure etc but this can be ignored as i can log on to the console successfully from LGW's servers

Highlighted

Can you check the Updater log and see if you have a line with this exact text inside:

 Warn  [OwinContextExtension] Sending retry request [Client certificate doesn't exist]

Highlighted

there are 3 updater logs m which one?

Highlighted

okay i have checked all the updater logs and i performed a search for the following

Client certificate doesn't exist

Nothing was found

Highlighted


OK,

Then we rolled out "known issues".

I strongly suggest at this point to open a case with support and have a support engineer on it

to collect more data and help troubleshoot.

Highlighted
Did you manage to resolve this in the end? We're experiencing the exact same issue.
Highlighted

Hi, yes the fix was to update the agent on the affected machines and the ata server

Highlighted
Thanks for taking the time to reply Praful. Reading deeper, my issue is actually different and we are already fully up to date. Thanks anyway
Highlighted

I also notice within the ATA center, the LG keeps complaining the service stating says starting, to me this is an issue afterll

Highlighted

I also notice within the ATA center, the LG keeps complaining the service stating says starting, to me this is an issue afterall