IBM Support

Troubleshooting Internet Explorer to HMC connectivity problems

Troubleshooting


Problem

Internet Explorer connection to HMC fails

Symptom

IE connections to the HMC hang before login, disconnect unexpectedly during use, or fail entirely.

Resolving The Problem

Use the procedure below to remedy the most common causes of Internet Explorer connectivity problems.

NOTE: If the client browser is running on Windows XP or Windows 2003 Server, please review Technote # N1019758 and take any necessary action before proceeding with the steps below.


I. Verify that port 9960 is open on all firewalls between the client browser and the HMC. For HMC V7R7.8.0, port 12443 must be open as well.


II. Open Internet Explorer and go to Tools -> Internet Options

    A. Click the "General" tab
      1. Delete Cookies and Files related to the HMC hostname or IP being connected to.

      Do this by deleting all cookies and files or by clicking "Settings" and manually deleting the individual cookies and files from "View Files" and "View Objects"


    B. Click the "Content" tab
      1. Click "Clear SSL state"


    C. Click the "Advanced" tab
      1. In the "Java" section, verify that "Use JRE [version] for <applet>" is checked and make note of the version listed.

      2. In the "Security" section, verify that at least the following are selected:
      "Use SSL 3.0"
      "Use SSL 2.0"
      "Use TLS 1.0"


III. Close Internet Explorer


IV. Open the Java Control Panel. Start -> Control Panel -> Java
    A. Click the "General" tab
      1. In the "Temporary Internet Files" section, click "Delete Files". For newer Java versions, select "Settings" to get the "Delete Files" option.

      2. Verify that "Downloaded Applets", "Downloaded Applications", and "Other Files" (if available) are checked, then click "OK".

    B. Click on the "Java" tab
      1. In the "Java Applet Runtime Settings" (if available) and "Java Application Runtime Settings", click "View", and verify that the version noted above in Section II.C.1 is listed and enabled

    C. Click on the "Security" tab
      1. Click on "Certificates" and verify that the "User" tab is on top
        a. For Certificate type: Trusted Certificates, select any entries for International Business Machines, and click "Remove"

        b. For Certificate Type: Secure Site, select any entries for the HMC being connected to, and click "Remove"

        c. Click "Close"


    D. Click on the "Advanced" tab
      Note: "Show console", "Enable tracing" and "Enable logging" are used for debug only. These can be disabled once the issue is resolved.

      1. Debugging - select "Enable tracing" and "Enable logging"

      2. Java console - select "Show console"

      3. "Default Java for browsers" (or "<APPLET> tag support" for older Java versions)- enable "Internet Explorer"

      4. Security -> General - select the SSL and TLS versions that were selected in the IE options
      "Use SSL 3.0"
      "Use TLS 1.0"


    E. Click "OK" to close the Java Control Panel


V. Launch Internet Explorer and try to connect and login to the HMC.
    A. Monitor the Java console window for output. It may take several seconds to a minute for the applet to launch.

    B. Pay careful attention to any prompts or warnings received during the process.

    NOTE: A warning, stating that the signer certificate for CheckJVMApplet2 has expired, may appear. Support is aware and is working on updating the digital signature.

If the connection or applet still fails, make note of the error, as well as the contents of the java console window, and send that information to IBM support.

[{"Product":{"code":"SSB6AA","label":"Power System Hardware Management Console Physical Appliance"},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Component":"HMC","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"Version Independent","Edition":"","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]

Document Information

Modified date:
22 September 2021

UID

nas8N1019791