Configuring DKIM is not working...

[smkornegay]

I am trying to configure DKIM on SMG rev.762 and the key generator errors out with " System error - An error occurred during key generation." and no key is created.  I have a ticket in, but it has been a week with no movement from Micro Focus.  I looked at getting external keys, but they don't resemble the instructions from Micro Focus at all.

Anyone got any experience with this?  My CIO is chomping at the bit to get it setup and nothing is working.

[ketter · Accepted solution]

I setup DKIM on my SMG.  The steps I took were:

* SMG > org/policy mgmt > domain mgmt > (my domain) > dkim signing
domain = (my domain)
selector = (I just used the default)
* save
* click create keys
* click public key

I entered the public key into my DNS records.  Then used some of the free tools out there (such as mxtoolbox) to verify the setup.  I did this about a year ago.  I've not heard of anything breaking DKIM on SMG in the meantime.  But if the above steps just error out, you probably need someone to take a look at it.

You can always ask for your Support Request to be escalated.  You also have the option of posting here: https://community.microfocus.com/t5/Talk-to-a-Technical-Services/bd-p/Manager  The Talk to a Technical Services Manager forum is not meant for the technical issue itself, but to get some traction going on the SR.

Hope that helps.

[smkornegay]

Yes, the create keys step fails with the error.  I have asked for them to connect and actually look at the issue this morning, but I haven't heard back.  I will escalate if I don't hear anything in a couple of hours.  

Thank you for the advice.

[smkornegay]

Do you know if the new SuSE version of the SMG appliance available yet?

[ketter]

I've not seen any release notices and theree is nothing available to download in my Customer Center.  I don't think it is out yet.  MicroFocus was aiming for end of September according to Mike Bill in this thread: https://community.microfocus.com/t5/SMG-User-Discussions/Update-Ubuntu/m-p/2685836#M131  My assumption is that it will be any day now, but that is just me guessing.  I'm definitely looking forward to using it.

[smkornegay]

Turns out our virtual appliance is hosed.  We are having to rebuild on a new virtual appliance.  How do I copy all of the settings to the new appliance?  Is there a backup/restore configuration somewhere?

[ketter]

I'm not aware of a backup/restore utility.  Although if your appliance is hosed, I would be concerned about trusting any out put from it.  Seems like the safest method would be to open the configs side by side and setup the new one making sure all settings are correct.

[smkornegay]

The appliance works fine, it is just the opendkim service that won't run.

[ketter]

Ok.  Well unfortunately, I don't know of a process for this except for doing a manual comparison.  As I understand it, there will be a documented upgrade procedure to move from SMG on Ubuntu appliance to the new SMG on the Common Appliance (SLES).  They were aiming to release that by the end of last month...obviously its delayed, but I'm hoping it is a short delay.  So if you can wait for that release, you might have an easier method for getting things done.  But if you have to have DKIM immediately, you should probably just stand up a new one and compare settings.

I went ahead and created an enhancement request for this: https://ideas.microfocus.com/MFI/mf-smg/Idea/Detail/15232

[ChasR]

Funny,
I have exactly the same problem as you. Looks like something has been broken in the updates.
Cheers
ChasR.

[KBOYLE]

---

@ChasR wrote:
Funny,
I have exactly the same problem as you. Looks like something has been broken in the updates.
Cheers
ChasR.

---

When it appears that an issue is the result of a bug there is usually little we can do to help. The best course of action is an SR and the more customers who open an SR for the same issue the more likely it will get the attention it needs for an early resolution.

[ChasR]

Have entered a service request. Also tried an much earlier build with the same result. Will wait and see what happens

[smkornegay]

We started the latest appliance and then copied new update files (update_scripts - v6 and v7) to this location:  

/opt/gwava/assets/updater/PostUpdate/

They sent me the new update files.  Then we updated the SMG appliance (both SMG software and Ubuntu 16), then rebooted.  Upon reboot, it all worked.

We had to copy all of our settings from the old appliance console to the new one (one by one with a split screen).  I had opened a ticket and they assisted with that in a remote session.

[ChasR]

Got a reply back which solved the problem. I will paste it here so anyone else with this same issue will have a solution. I did not need to use the copies of the two scripts supplied by Microfocus as the existing ones on the server were OK and it looked like they had not executed which caused the problem.

Here is the solution:

go to /opt/gwava/assets/updater/PostUpdate/update_scripts

the 2 files in question are update_v6.sh and update_v7.sh

chmod +x update_v6.sh and chmod +x update_v7.sh

./update_v6.sh

./update_v7.sh

You may have to restart the server first before running these scripts, after which I found that I could now generate the certificates from gwava and all appeared to be working as it should.

Cheers

ChasR.

[smkornegay]

Yep, that is it.