Troubleshooting: UMS Tray App Reports Connection failure: read failed

IGEL OS 12 devices are disconnected form the IGEL Universal Management Suite (UMS) and you can see the following error message in the UMS tray app: Connection failure: read failed or in device logs. This error occurs because the TLS handshake is aborted during the establishment of a TLS connection to the UMS. This can happen when the IGEL OS 12 device has an expired client certificate.

Environment

• IGEL OS registered in UMS more than 1 year ago

• IGEL OS version 12.4.1 or lower

Problem

For devices with older IGEL OS 12 version, that is, running IGEL OS version 12.4.1 or lower, the client certificates are never renewed. These certificates expire 1 year after device registration in the UMS. As a result, devices cannot connect to the UMS and you can see the following error message in the UMS tray app: ERROR: Connection failure: read failed

You can also see the same error message in the device log files when the device is trying to connect to the UMS.

Solution

The mitigation of the issue is done by allowing expired certificates to be temporarily accepted for device connection to the IGEL UMS. This way, the devices can be updated without manual intervention.

For details, see Troubleshooting: IGEL OS 12 Devices Failing to Connect to UMS Due to Expired Client Certificates.

For details on how to enable the custom TrustManager for the IGEL Cloud Gateway, see Troubleshooting: IGEL OS 12 Devices Failing to Connect to the ICG Due to Expired Client Certificates.