Signiant Support

Unable to install agent: Process Control Service is Currently Active Print


Problem

When installing a Signiant Agent, the certificate signing step fails with the following message:

The 'Process Control Service' is currently active.
It must be shut down before issuing the 'buildssf' subcommand.


Subsequent actions which rely on the Agent's security information also fail.

Solution

Something has bound to the TCP port used by the Signiant Agent. This process needs to be identified and terminated before the installer can properly run.

The process in question may be dds_pc, or is possibly an unrelated processes that requested a random TCP port and was assigned the port used by the Signiant agent (TCP 49221 by default).

To resolve the problem, do the following:
  1. Revoke the Agent's certificate (if one exists) on the Manger. Do not remove the Agent from the database. (This step is required only if an Agent was previously installed on this host -- for fresh installs no certificate will be present).
  2. Stop the Agent services. There is likely nothing to stop, but this may clear up any rogue  Signiant processes. For  Linux, Mac OS X and Unix agents, run the following as root:   /usr/signiant/dds/init/siginit stop
    For Windows, use the Control Panel to stop the Signiant services, or run the following from the command line as an administrator:
              net stop ddsursrv
              net stop ddspcsrv
  3. Use ps or the Task Manager and list all processes and look for dds processes. Stop any processes starting with dds_.
  4. Run the Signiant uninstaller (siguninstall) from the Agent bin directory. By default this is /usr/signiant/dds/bin/siguninstall on Linux, Mac OS X and Unix systems or C:\Program Files\Signiant\Mobilize\bin\siguninstall.exe on Windows systems.
  5. Identify the process using TCP port 49221.  On Linux, Mac OS X and most Unix Agents you should be able to use the lsof command installed with your operating system. To list all processes using TCP port 49221, run the following command: lsof -i: 49221.
    If your system does not have lsof installed by default, an Internet search may provide a link to a version or similar utility suitable to your OS.
    For Windows systems, you can obtain the process ID (PID) for the process using 49221 using the following command from a DOS prompt:
    netstat -ano | find "49221"
    This will return output similar to the following:

            TCP    0.0.0.0:49221          0.0.0.0:0              LISTENING       1716

    The process ID will be the number in the rightmost column. Using the Process tab on the Task Manager, you can sort the running processes by PID. Look for the PID returned by the above command and, if it's a safe operation, end this process.
  6. Alternatively for Windows, the Process Explorer from Microsoft can display the ports bound to a process. Select a process and view its properties. On the TCP/IT tab, a list of connections is displayed. The Local Address column lists the ports used after the colon.  Search all processes until you find one using the Signiant transfer port (49221 by default). Once found, and if this is a safe operation, terminate the process. 
  7. Once the process has been identified and terminated, install the Agent as normal.