If you are having issues post-deployment with the Cloud Maker Enterprise Server (CMES), please follow the below guidance to check for any configuration issues.
Check PostgreSQL firewall configuration
As part of the CMES install, it is a requirement to add the Public IP address created during installation to the PostgreSQL firewall.
Please check that the Public IP has been added to the PostgreSQL firewall.
Restart VMSS after adding PostgreSQL firewall rule
Check that you have restarted your VMSS after adding the Public IP to the PostgreSQL firewall. This is required to ensure that the CMES appliance attempts to reconnect to the PostgreSQL database with the firewall rule applied.
Verify that the Postgres connection string is correct
For the CMES appliance to communicate with the PostgreSQL database, the connection string must use the ADO.NET style connection string with Ssl Mode set to Ssl Mode=VerifyFull.
Also, ensure that the PostgreSQL DB password is entered in place of the {password} placeholder.
Finally, ensure the database name and admin username have been added to and are correct in the PostgreSQL database connection string.
To check the connection string, navigate to the Key Vault in the Azure portal that stores the connection string.
You can determine which Key vault stores the connection string by looking in the user data field of the VMSS operating system settings as follows:
Navigate to the VMSS resource in the Azure portal.
Select Operating System from the left menu.
Scroll the User data text box until you see AppSettingsKeyVaultUri.
Note the name of the Key Vault in the URI specified.
Navigate to the Key Vault resource that stores the connection string. Review the connection string under the Secrets property on the left menu.
You may need permission to view data within the Key Vault. Please speak to your administrator to be granted access to this resource.
Verify PostgreSQL Database is populated with CMES tables
Check the PostgreSQL database cloudmaker exists and that it contains tables such as cloudmaker.actors.
Check the object ID supplied is correct
As part of the installation, the Object ID of the provisioning user is supplied. This Object ID must be correct to allow the provisioning user to log in to the CMES appliance and subsequently configure SCIM integration for additional user logins.
You can check the provisioning user Object ID by doing the following:
Navigating to the VMSS resource in the Azure portal.
Select Operating System from the left menu.
Check Modify user data.
Scroll the user data box until you see ProvisioningUserExternalId.
Check the Object ID matches the Azure Active Directory Object ID of the user you wish to use to provision the CMES appliance.
If necessary, update the Object ID, then click Save to save the user data.
