Trend Micro - Securing Your Journey to the Cloud Business
Support
Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

SecureCloud Agent cannot configure the SSL to the Key Management Server (KMS) after upgrading OpenSSL

    • Updated:
    • 24 Nov 2016
    • Product/Version:
    • SecureCloud 3.6
    • Platform:
    • CentOS 6 32-bit
    • CentOS 6 64-bit
    • Linux - Red Hat RHEL 6 32-bit
    • Linux - Red Hat RHEL 6 64-bit
    • Linux - SuSE 11
    • Linux - SuSE 11 64-bit
    • Ubuntu 12.04 32-bit
    • Ubuntu 12.04 64-bit
Summary
The SecureCloud Agent fails to verify the SSL connection to the KMS when OpenSSL is ugpraded to a version from February 11, 2013 or above.
Details
Public
The issue occurs because the libcrypto.so file during the SecureCloud agent installation does not match the newer version of OpenSSL.
As a workaround, replace the old library file with a symbolic link of the new version.
Do the following:
  1. Under /var/lib/securecloud, back up libcrypto.so.10. Run the following mv command:
    # mv libcrypto.so.10 libcrypto.so.10.bak
  2. Create a symbolic link "libcrypto.so.10" inside the system library of the SecureCloud Agent folder. The default path is /usr/lib64/libcrypto.so.10 in a 64-bit machine.
    Run the following command:
    # ln -s /usr/lib64/libcrypto.so.10 /var/lib/securecloud/libcrypto.so.10
  3. Update the SecureCloud Agent. Do any of the following:
    • Restart the SecureCloud Agent. Run the following command:
      # service scagentd restart
    • Reconfigure the Agent by running any of the following commands:
      #sh /var/lib/securecloud/scconfig.sh
      or
      #sh /var/lib/securecloud/scprov.sh conf
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1102532
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.