ECL2.0 - FAQ
- How to switch the VM (with HA function) intentionally when hypervisor failure on a trial basis?ECL2.0, Firewall (Brocade 5600 vRouter), Firewall (vSRX), Load Balancer, Virtual Server
- After the reboot of vLoad balancer, the configuration of SSL certificate seems to be missing.ECL2.0, Load Balancer
Your case may correspond to the known issue "Load Balancer(NetScaler VPX) will restart unexpectedly and SSL certificate related settings will miss after restarting".
Please check the following URL.
- What are the message for "Smart Protection Server disconnected for Smart Scan"?ECL2.0, Host-based Security
The "Smart Protection Server disconnected for Smart Scan" message appears when you are unable to connect to the Smart Protection Server (SPS).
The conditions that prevent you from connecting are OS- and environment-dependent issue as follows.
- The timing of the SPS database update
- Unable to connect to SPS due to network problems.
- The name resolution for connecting to SPS fails.
- Internal processing problems on a computer with a Deep Security Agent (DSA) installed
Smart Protection Server is designed to connect to Trend Micro via the Internet.
Please make sure that you have appropriate access restrictions.
If you see "Smart Protection Server Connected for Smart Scan" after "Smart Protection Server disconnected for Smart Scan" in the HBS WebUI, it is temporary and there is no operational problem.
- We are planning to update the Linux OS kernel, but how can we check if the Linux version of the Agent supports it?ECL2.0, OS
Various DSA versions and kernel support packages are released after evaluation and review by us.
Therefore, it may be used later than the vendor's release.
To update the kernel, please visit the vendor site (*1) and the HBS WebUI screen
[Administration] > [Updates] > [Software] > [Local] and check the available kernels(*2) before updating.
[9.x/10.x/11.x/12.x] Supported Linux Kernels
Please export and unpack the latest publicly available kernel support package and check to see if the version of the kernel you want to use is included.
If you can confirm that it is included, you can continue working on it.
If it is not included, contact us via the Enterprise Cloud 2.0 ticket system.
- I logged in from the Azure portal, but I can't operate resources.ECL2.0, Hybrid Cloud with Microsoft Azure
From March 27, 2020, the account assignment role has changed.
Please refer to theTutorial - 10.5.4. Assign a contributor role to an Azure account to assign the collaborator role.
- I installed Host-based Security (HBS) in an ECL 1.0 VM but the computer information is not registered on the WebUI. What is the cause of this problem and how do I fix it?ECL2.0, Host-based Security
When installing host-based security (HBS) in an ECL1.0 VM(The number of registrations on the HBS WebUI does not match due to duplicate registrations), some computers may not be registered correctly. This problem may occur depending on the specifications and construction status of the VM being used in your environment.
【Events & Reports】 in the upper part of the HBS WebUI
⇒【System Events】 in the left pane.
⇒ In 【All Computers】, Please check if the event "Activated" is outputted.
However, if the name of the computer is different from the name of the computer that performed the activation process, this event may have occurred.
In this case, please take the following measures
From the HBS WebUI, click 【Administration】 in the upper row
⇒【System Settings】 in the left pane.
⇒【 Agents 】
⇒ 【Agent-Initiated Activation】
⇒Change "Re-enable the existing Computer" to "Active a new Computer with the same name".
After this setting, please confirm that the computer will be registered correctly on the VM that is not registered correctly on the HBS WebUI by following the steps of "Disconnecting from the management server" and "Activation code execution".
In addition, the Agent of the computer already registered on the HBS WebUI may not operate normally due to this event. In that case, please follow the steps of "Disconnecting from the management server" and "Activation code execution" in the same way.
- When I tried to open my tenant via Cloud Computing Control Panel with Google Chrome, the other tenant which I didn't specify was opened.Account, ECL2.0
Please use Firefox.
We acknowledged this issue and conducted the investigation and specified the cause.[Related URL] https://developers.google.com/web/updates/2020/07/referrer-policy-new-chrome-default
The cause of this issue lies in the Referrer handling change in Google Chrome (after version85).
The upgraded Google Chrome doesn't send the tenant information to the authentication server when Customer selected their tenant and this causes that the customer can't open their selected tenant.
We are considering the countermeasures against this issue.
However, it will take time.
Due to the above, we'd like the customers to use Firefox when you access to your tenant via Cloud Computing Control Panel.
Thank you for your understanding and cooperation.
- Please tell me the behavior when pushing the "ctrl+alt+delete" button in console screen of virtual server.ECL2.0, Virtual Server
The behavior is different depending on the OS.
If the guest OS is Linux, when you push the ctrl+alt+delete button, your virtual server will be rebooted.
With the following command, you can disable the reboot function of the ctrl+alt+delete button.
# systemctl mask ctrl-alt-del.target
※Even if you disabled the reboot function following the above methods if you click the ctrl+alt+delete button 7 times in 2 seconds (= sending the SIGNAL 7 times in 2 seconds), your virtual server will be rebooted.
Please see the SIGNAL entries in the manual page of systemd (the URL shown below) for more information.
If the guest OS is Windows OS, if you click the ctrl+alt+delete button, your virtual server will not be rebooted.
Instead of the OS reboot, the security option screen is displayed like the following image.
- I tried to put QCOW2 format private template in the volume but the status became an error and I could not configure it as bootable and couldn't create the root volume.ECL2.0, Virtual Server
It's considered that the prepared volume size was insufficient in its size against the QCOW2 format private template.
Regarding how to deal with the error, please create a bigger volume than the prepared volume size and put the QCOW2 format image template in the newly created bigger volume again.
After that, please confirm whether the status should become an error again.
[issue] I tried to put QCOW2 format "Windows Server 2012 R2 Standard Edition" private template(13.6GB) into the 15GB volume and the status became an error.
[cause] It's considered that the volume size was insufficient against the private template image created with "Windows Server 2012 R2 Standard Edition". When you create the volume with "Windows Server 2012 R2 Standard Edition", the volume size must be over 80GB. (see below document)
[workaround] I created the volume over 80GB and put the image template in it again and I was able to create the root volume without problems.
If you changed the volume size (= created the bigger volume) but the status should become an error repeatedly, we are sorry to bother you but we would like you to create a ticket to bring the issue to our attention.
** Reference URL **
[Service Descriptions: Restrictions on the official image] Each OS has the minimum necessary volume size.
Service Descriptions - Virtual server - Restrictions on the official image
※Excerpt from the above Restrictions[FAQ: Difference between RAW format and QCOW2 format] ※If QCOW2 format, the data is compressed and uploaded to Image Storage.
When you create a volume with the official image template, you are unable to create the volume if the size is less than the official image template size.
(example: If you need to use Windows OS, you will need to prepare 80GB volume or bigger volume.)
FAQ - If I upload my private template image to "Image Storage", which format should I select, RAW or QCOW2?Please tell me the difference between the two formats as well.
- If I upload my private template image to "Image Storage", which format should I select, RAW or QCOW2? Please tell me the difference between the two formats as well.ECL2.0, Image Storage
When you create the template image in RAW format, the data is not compressed and the image is uploaded to "Image Storage".
If you create the template image in QCOW2 format, the data is compressed and the image is uploaded to "Image Storage".
QCOW2 format tends to take less time than RAW format when it is uploaded to "Image Storage".
However, when you create the image in QCOW2 format, it sometimes takes long time to compress the data.
FAQ - How long does it take to create snapshots of virtual servers and images using the upload function?
Service Descriptions - image-storage - (Supplemental) Detailed specifications of image copying (Common for Private Template/private ISO)