Support Center > Search Results > SecureKnowledge Details
Policy installation fails on SMB Gateway with "sfw_load: Failed to add CMI signatures" error Technical Level
Symptoms
  • Policy installation fails with an error when the user manually fetches the policy from the Security Gateway.
    {policy} [ERROR]: appi_cmi_handler_add_signatures_cb: wsis_set_parser_parse failed
    {module} [ERROR]: cmi_loader_update_apps: add_signatures_cb failed for app APPI (0)
    {module} cmi_loader_update_context_destroy: Destroying update context opaque 0x4e70238
    {module} cmi_loader_update_context_destroy: Destroying update context opaque 0x545ba28
    {module} cmi_loader_update_context_destroy: Destroying update context opaque 0x59d56d0
    {module} cmi_loader_update_context_destroy: Destroying update context opaque 0x4284268
    cmi_loader_update_apps failed
    Policy installation failed. error is:
    [ 6057 1736839168]@ms-cp-gun-gw02[24 Feb 10:04:30] fw_atomic_cmi_add: cmi_loader_install_policy failed.
    [ 6057 1736839168]@ms-cp-gun-gw02[24 Feb 10:04:30] [10:04:30.935] [fw_atomic_cmi_add] [End]
    [ 6057 1736839168]@ms-cp-gun-gw02[24 Feb 10:04:30] sfw_load: Failed to add CMI signatures.
    [ 6057 1736839168]@ms-cp-gun-gw02[24 Feb 10:04:30]
    sfw_load: Error loading security policy
    
    
  • The issue persists even if:
    • The user replaces applications_entitlement.c and appi_db.c from a working cluster member.
    • The user replaces the applications_entitlement.c and appi_db.c from a freshly installed device.

Cause
The file is corrupted, need to refresh it


Solution
Note: To view this solution you need to Sign In .