Identity collector unstable with error - sk113021 and password is ok

[Carlos_Jara]

Hi,

We are detecting that Identity collector unstable with error - sk113021 and password is ok.

We change the identity collector server keys in the smartconsole (checkpoint cluster), apply policies, and then reconnect. After a few hours the error occurs again (error - sk113021).

Could you help me?

[the_rock]

Did you ensure connectivity is there between the server and the fw? Also, is option for "all interfaces" selected as defined in the sk?

Andy

[Carlos_Jara]

Hi,

Connectivity  between the server and the fw is ok and option for "all interfaces" is selected as defined in the sk.

any other idea?

[Chris_Atkinson]

Out of interest which version of identity collector agent is used here?

[Carlos_Jara]

We are trying with two servers with this versions --> 81.035 Y 81.040

[the_rock]

Can you run pdp idc status and pdp connections idc commands on the firewall?

[Carlos_Jara]

Hi,

This is the result!

[Expert@fwcdg02:0]# pdp idc status
Identity Collector IP: 10.192.199.214
Identity Sources:
No information about identity sources

[Expert@fwcdg02:0]# pdp connections idc

Number of IDCollector sessions: 1
------------------------------------------------------------------------------------------------------------
# IP Number of events Shared secret status Last Event
------------------------------------------------------------------------------------------------------------
1 10.192.199.214 46541 Valid No events received in the last hour

I attach you Identity Collector Server Trace (ia_ag*.logs)

[Carlos_Jara · Accepted solution]

Hi,

SOLVED!!!!

The root problem was on self signed certificate in the cluster, we update de certificate with one valid certificate in "Platform Portal" + Regenerate Keys (Ientity Collector) + Install Policy + Trust new certificate in Ientity Collector Server  ... and finaly it's WORKS. 

Many thank's for your help!