Symantec IGA

 View Only
  • 1.  CA Identity Suite: Low Entropy on virtual appliance Linux server due to rngd not running

    Posted Jan 08, 2020 12:00 AM
    Hi Team,
    I saw this article to improve CA suite performance by starting the "rngd" service.
    But i tried the steps, unable to start the service "rngd", have anyone try this performance tuning in CA IM 14.3 VAPP ?

    ===========================

    If you are seeing poor performance in your virtual appliance environment, it is possible that the linux machine hosting your system has low entropy which is preventing processes from functioning as normal. 

    If this is happening it is likely that rngd is turned off in the environment. 

    Release:
    Component: IDSVA

    1. If the machine doesn't have rngd running, please check the following: chkconfig --list | grep "rngd"

    2. if on any machine, the output contains 3:off that means the rngd service was disabled

    3. please run the following to enable the service: chkconfig rngd on 3
    then run: sudo service rngd start

    This will restart the rngd service, providing the needed entropy for the environment. 
    =============================



    ------------------------------
    William
    ------------------------------


  • 2.  RE: CA Identity Suite: Low Entropy on virtual appliance Linux server due to rngd not running

    Broadcom Employee
    Posted Jan 08, 2020 12:10 AM
    If you are using Vapp 14.3 CP1, then RNGD has been disable due to
    performance reason. Perhaps that explains why the steps here is not
    working.
    --
    Yuan-Heng (Frank) Lin
    Principal Support Engineer | Enterprise Software Division
    Broadcom




  • 3.  RE: CA Identity Suite: Low Entropy on virtual appliance Linux server due to rngd not running

    Posted Jan 08, 2020 05:05 AM
    We received this guide to tune the performance, which mean now we can't tune the rngd. But does this mean, there is still a performance issue in Linux virtual appliance ?



  • 4.  RE: CA Identity Suite: Low Entropy on virtual appliance Linux server due to rngd not running
    Best Answer

    Broadcom Employee
    Posted Jan 08, 2020 10:23 AM
    I will assume no as rngd service has been turned off and the root
    cause to cause the performance impact has been removed.

    --
    Yuan-Heng (Frank) Lin
    Principal Support Engineer | Enterprise Software Division
    Broadcom