Web Tier deployment
This is usually due to name resolution issues, or networking issues such as a misconfigured firewall blocking ports.
On the AM8.x appliance, enable SSH through the Operations Console, if this has not been done already. Connect to the AM8.x server by SSH:
login: rsaadmin
password: (the Operating System password supplied during setup)
sudo su
password (use the password from above)
Test 1, from the AM8.x Server:
nslookup (to the IP address, NOT the name, of the Web Tier server)
If nslookup returns incorrect name information, this is not acceptable. NSlookup to the IP address needs to either return correct name information, or none at all. If nslookup fails to return a name, this MAY be acceptable, provided all hosts file on all AM8 server(s) are properly configured to include information on all Web Tier servers, and Test 2 passes. The hosts file needs to be configured as
ipaddress fqdn shortname (all lowercase)
If nslookup returns incorrect name information, fix Reverse-DNS .
Test 2 from the AM8.x server:
ping (the FQHname of the Web Tier server)
ping (the short name of the Web Tier server)
The AM8 Server needs to be able to resolve the IP address of the Web Tier Server, and not have routing issues
Test 3 from the Web Tier server:
nslookup (to the IP address, NOT the name, of the AM8 server)
If nslookup returns incorrect name information, this is not acceptable. NSlookup to the IP address needs to either return correct name information, or none at all. If nslookup fails to return a name, this MAY be acceptable, provided all hosts file on all Web Tier server(s) are properly configured to include all AM8 servers, and Test 4 passes. The hosts file needs to be configured as
ipaddress fqdn shortname (all lowercase)
If nslookup returns incorrect name information, fix Reverse-DNS .
Test 4 from the Web Tier server:
ping (the FQHname of the AM8 server)
ping (the short name of the AM8 server)
The Web Tier Server needs to be able to resolve the IP address of the AM8.x Server, and not have routing issues
Test 5 from the Web Tier server:
See A62748 to verify proper SSL connectivity between the Web Tier and AM8.x servers using OpenSSL .
Related Articles
AM8 web tier shows as offline or pending connection 895Number of Views Managing the Web-Tier Service 258Number of Views Generating a Report on a Windows platform hosting Web Tier software 311Number of Views Unable to install RSA Authentication Manager Web Tier on Microsoft Windows Server 235Number of Views Enabling debug for troubleshooting an RSA Authentication Manager 8.x web tier deployment 1.19KNumber of Views
Trending Articles
RSA Authentication Manager Upgrade Process Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Authentication Manager 8.9 Release Notes (January 2026) AFX Server Fails to Start with 'Could Not Build a Validated Path' and 'Timed Out Waiting for AFX Applications to Start' in… AFX Server stuck in 'Not running' State, with error 'timed out waiting for AFX applications to start'