How to fix issues with the Lenel Console when OnGuard is not installed on the C:\ Drive

How to fix issues with the Lenel Console when OnGuard is not installed on the C:\ Drive

Procedure Steps

Section A


Verify if the LS Web Service will start. If it starts, move on to Section B. If it does not start, check the NGINX log (C:\programdata\lnl\nginx\logs) where the following entry was repeated.


2017/10/13 08:16:53 [emerg] 4548#4552: BIO_new_file("C:\ProgramData\Lnl\nginx/conf/ls_server_cert.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('C:\ProgramData\Lnl\nginx/conf/ls_server_cert.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)


CAUTION: The command below will write a new certificate if it does not match was is already in LS Certificate Store (case-sensitive); make sure you do not create a second certificate.


In order to check the installed certificate, complete the following steps:


     Open mmc and install the certificates snap-in.


  1. Run mmc.exe.

    1. From File, select Add/Remove Snap-in.
    2. Select Certificates, and then click [Add >].
    3. Select Computer Account, and then click [Next].
    4. Click [Finish].
    5. Click [OK].
  2. Expand Trusted Root Certificate Authorities, and then Delete/Export Root Agency & Prism SOA Common Trusted Root.
  3. Expand LS Certificate Store, and then Delete/Export the certificate that appears here.


In order to correct this, run the following in cmd (as administrator). Note: There are two place holders in the command that need to be updated when run:

  • YOURINSTALLDRIVE is the drive that OnGuard was installed to.
  • SERVERFQDN is the Fully Qualified Domain Name of the OnGuard server running LS Message Broker. 

"YOURINSTALLDRIVE:\Program Files (x86)\OnGuard\Certificates\lnl_app_server_certificate_installer.exe" -key=C:\ProgramData\Lnl\nginx\conf\ls_server_cert_key.pem -cert=C:\ProgramData\Lnl\nginx\conf\ls_server_cert.pem -store="LS Certificate Store" -cn=SERVERFQN


After this is run the ls_server_cert.pem, and ls_servcer_cert_key.pem files should be located in the C:\programdata\nginx\conf folder that the log referred to as missing.


Section B


To deal with the issue of LS Module Manager service missing, create the service manually:


    1. Open the command prompt as an administrator.


    2. Browse to the location where the module manager is located.
    3. Enter the following command: nssm.exe install module-manager.exe. (See below.)
    4. This will open a dialog box (see below). You only need to configure the Application tab.
    5. Give the Service name a friendly name such as  “LS Module Manager”.
    6. The Path should be the path of the module_manager.exe.
    7. The Startup directory should be the folder where its located.
    8. Click [Install service] and you should get a confirmation that it was successful in command prompt.
    9. Verify the settings were written to registry correctly by going to the registry and finding the HKey_localmachine- system - current control set - services.



The registry entry in the end of the service should look like this:
***Please note that if you must make any changes to your registry, back up your registry first***



Applies To

OnGuard (All versions)

Additional Information