[Question] aSec / SCP for Removing aSecurity Integration with HCI

Newbie481305 Lv1Posted Sep-02-2025 16:05

Hello,

We are currently conducting various tests with Sangfor, and we have encountered an issue related to aSecurity (aSec) and SCP.

When attempting to add a cluster via the SCP Web UI, we receive the following error at the final step:

"Failed to add cluster. Failed to add or edit the cluster (172.30.1.55). Cause: Integrated authentication is established between the cluster and aSecurity. Please remove the integration before centralized management. Error: 0x101001010019."

According to the message, the integration with aSec needs to be removed. We tried accessing the aSec console and changing the platform type to SCP, but we received the following message:

"Failed to change to another platform type because aSecurity has ever been integrated with HCI."

As a result, we are unable to change the platform type or remove the integration. Could you please advise the proper way to remove the integrated authentication? Do we need to delete the cluster entirely, or is there another recommended procedure?

Thank you very much for your assistance.

By solving this question, you may help 792 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Newbie339802 Lv1Posted Sep-13-2025 17:42
  
You’ll need to first disconnect the aSec–HCI integration from within the HCI cluster management console (not just aSec), then unregister the cluster in aSec before re-adding it to SCP, otherwise the authentication binding will block the change.
dino game
Newbie337989 Lv2Posted Sep-03-2025 10:10
  
Try this

1. Log in to the HCI Cluster Console (not SCP, not aSec).
- Go to Cluster Settings > Integration.
- Look for aSecurity Integration and remove/unbind it there.
- This step clears the authentication link from the HCI side.

2. On the aSec Console
- Navigate to System > Platform Management / Integration Settings.
- Remove the HCI cluster reference manually if still present.

3. Verification
- After removal, confirm on the HCI Cluster Web UI that no external integration is listed.
- Only then retry adding the cluster into SCP.

If Removal via UI Fails

- Sometimes the UI blocks removal if historical bindings exist.
- In such cases, Sangfor TAC provides a CLI command / backend cleanup script to clear the integration flag from the HCI cluster database.
- You don’t need to delete the entire cluster, just remove the integration record.
- Best to do this with Sangfor TAC

I Can Help:

Change

Board Leaders

NyxZale...

Weekly Sharers

Newbie5...

Weekly Questioners