Release Notes › Known Issues › General Known Issues

General Known Issues

This section describes general know issues for CA Access Control for Virtual Environments.

No Timeout Message Displayed in VMware vSphere Client

Timeout messages are not displayed in case tasks performed in the VMware vSphere Client do not complete successfully.

Errors Messages Logged When Deleting Security Groups

Error messages are logged in the CA Access Control for Virtual Environments server log file when you delete security groups that has rules assigned from the VMware vShield App management interface.

Additional Configurations Required When Using Active Directory

If you configured CA Access Control for Virtual Environments to use Active Directory user store, complete the following steps:

1. In /etc/hosts file, do the following:
   • Add the IP address of the Active Directory server and the Distinguished Name (DN) of the Active Directory domain server. For example: 192.168.1.1.company.com
2. In /etc/resolv.conf, do the following:
   • Verify that the value defined in the search line resolves the Active Directory domain controller correctly.
   • Add the IP address of the domain controller as a nameserver. For example: nameserver 192.168.1.1

Tasks Indicator Not Displayed

The tasks indicators in VMware vSphere Client is not displayed if the logged in user does not have administrative privileges to the VMware vCenter.

CA Access Control Enterprise Management Hierarchy Not Updated

CA Access Control Enterprise Management does not update the security groups hierarchy display after the following events occurred in VMware vSphere Client:

• Transfer of an ESX/ESXi to a different datacenter
• Transfer of resource pools, virtual machines and virtual appliances between resource pools and virtual appliances
• Move of a resource pool or virtual appliance to a different ESX/ESXi
• Delete of a managed device or ESX/ESXi annotation key

  Note: This event changes the managed device attributes and can affect the automatic un-assignment of a managed device, if a related tag rule exists.

To workaround this issue, update the security groups hierarchy using the Synchronize and Update the VMware vCenter Hierarchy Discovery task, under the System tab.

Network Policy Rules Not Deleted From VMWare vShield App

If you delete a network zone policy after you it was assigned to a security group, the network rules are not removed from the VMware vShield App.

Cannot Create a Copy of a VMware vCenter Server Connection Object

In CA Access Control Enterprise Management, you cannot create a copy of an existing VMware vCenter Server connection.

Cannot Recreate VMware vCenter Server Connection

You cannot recreate a VMware vCenter Server connection object with a previously defined URL. To workaround this issue, replace the full DN of the VMware vCenter Server with the IP address.

Unsupported Characters in Managed Device Names

You cannot create manage devices in VMware vSphere Client or in CA Access Control Enterprise Management using the following characters:

• Backslash (\)
• Comma (,)
• Plus sign (+)

We recommend that to rename the manage devices name to remove prohibited characters

User Actions in VMware vSphere Client Not Monitored by CA User Activity Reporting Module

CA Access Control for Virtual Environments does not send users actions performed in VMware vSphere Client to CA User Activity Reporting Module. You cannot generates reports on users actions in VMware vSphere Client.