# CCG in new VA not present

**URL:** <https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, virtual-appliance\
**Created:** [October 7, 2025, 6:39pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836 "2025-10-07T18:39:20Z")\
**Posts on this page:** 20\
**Page:** 2

<div class="post-metadata">

**Author:** ![JackSparrow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jacksparrow/32/19685_2.png) [@JackSparrow](https://developer.sailpoint.com/discuss/u/JackSparrow)\
**Post date:** [October 14, 2025, 1:25pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/21 "2025-10-14T13:25:35Z")

</div>

@aleksander_jachowicz Did you find any solution?

---

<div class="post-metadata">

**Author:** ![aleksander\_jachowicz](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/aleksander_jachowicz/32/22938_2.png) [@aleksander\_jachowicz](https://developer.sailpoint.com/discuss/u/aleksander_jachowicz)\
**Post date:** [October 14, 2025, 1:36pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/22 "2025-10-14T13:36:03Z")

</div>

Unfortunately not. And I spent a week on an off diagnosing it. Hoping someone from Sailpoint development will have that fixed as doesn’t seem to be configuration issue.

---

<div class="post-metadata">

**Author:** ![JackSparrow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jacksparrow/32/19685_2.png) [@JackSparrow](https://developer.sailpoint.com/discuss/u/JackSparrow)\
**Post date:** [October 14, 2025, 1:49pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/23 "2025-10-14T13:49:41Z")

</div>

same thing. I have sent message to developer relations team and pinged over ambassadors chat as well. Still no help. Will update you if I get any response.[@developer\_relations\_team](https://developer.sailpoint.com/discuss/groups/developer_relations_team)

---

<div class="post-metadata">

**Author:** ![tyler\_mairose](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/tyler_mairose/32/30112_2.png) [@tyler\_mairose](https://developer.sailpoint.com/discuss/u/tyler_mairose)\
**Post date:** [October 14, 2025, 2:59pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/24 "2025-10-14T14:59:53Z")

</div>

Hey @JackSparrow @aleksander_jachowicz,

I’ve raised a ticket with the demo hub team to take a further look into the VA issues.

They suggested two commands you could run that has resolved this in the past:

```auto
va-bootstrap pair -t internal

```

```auto
va-bootstrap set-passphrase -t internal

```

I’ve heard from @JackSparrow that this did not help on his end, but I wanted to post it here in case it resolves the issue on other tenants.

---

<div class="post-metadata">

**Author:** ![aleksander\_jachowicz](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/aleksander_jachowicz/32/22938_2.png) [@aleksander\_jachowicz](https://developer.sailpoint.com/discuss/u/aleksander_jachowicz)\
**Post date:** [October 14, 2025, 5:11pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/25 "2025-10-14T17:11:40Z")

</div>

Just for the reference, I did use these commands and that didn’t help.

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [October 15, 2025, 12:59pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/26 "2025-10-15T12:59:41Z")

</div>

I think you need to make sure it is paired in a ‘demo’ setting. I don’t have immediate access right now to a VA, but I believe you need to pair it so that the VA recognizes that it is a DEMO environment, hence goes to the [identitynow-demo.com](http://identitynow-demo.com) url

---

<div class="post-metadata">

**Author:** ![sauvee](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/sauvee/32/23601_2.png) [@sauvee](https://developer.sailpoint.com/discuss/u/sauvee)\
**Post date:** [October 15, 2025, 2:12pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/27 "2025-10-15T14:12:28Z")

</div>

This is what you need to do / run on the VA:

> va-bootstrap reset  
> va-bootstrap set-passphrase -t demo

That worked for me for getting the VA setup for an \*.identitynow-demo.com environment.

---

<div class="post-metadata">

**Author:** ![SteinerBBQ](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/steinerbbq/32/29213_2.png) [@SteinerBBQ](https://developer.sailpoint.com/discuss/u/SteinerBBQ)\
**Post date:** [October 15, 2025, 2:23pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/28 "2025-10-15T14:23:29Z")

</div>

Have you only tried the OVA version? Curious if you’d have the issue if you tried deploying to GCP, AWS, or Azure. I have yet to encounter it as I use the Azure image which has its own sep file. I’m assuming you are trying to deploy the OVA to vSphere then? Cluster Components shows the CCG enabled in the UI?

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/7/5/753dd6569d8e34062b4a03ef74d74ebae5db6bb4.png)

---

<div class="post-metadata">

**Author:** ![JackSparrow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jacksparrow/32/19685_2.png) [@JackSparrow](https://developer.sailpoint.com/discuss/u/JackSparrow)\
**Post date:** [October 15, 2025, 2:28pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/29 "2025-10-15T14:28:04Z")

</div>

Tried with -demo as well.

---

<div class="post-metadata">

**Author:** ![JackSparrow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jacksparrow/32/19685_2.png) [@JackSparrow](https://developer.sailpoint.com/discuss/u/JackSparrow)\
**Post date:** [October 15, 2025, 2:30pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/30 "2025-10-15T14:30:30Z")

</div>

Yes, I’m using vmware workstation pro to run the OVA files. Haven’t tried deploying on cloud. But same was working few months back. Yes, by default CCG was checked.

---

<div class="post-metadata">

**Author:** ![SteinerBBQ](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/steinerbbq/32/29213_2.png) [@SteinerBBQ](https://developer.sailpoint.com/discuss/u/SteinerBBQ)\
**Post date:** [October 15, 2025, 2:31pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/31 "2025-10-15T14:31:08Z")

</div>

Thanks. I’ll see if I can reproduce using OVA.

---

<div class="post-metadata">

**Author:** ![SteinerBBQ](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/steinerbbq/32/29213_2.png) [@SteinerBBQ](https://developer.sailpoint.com/discuss/u/SteinerBBQ)\
**Post date:** [October 21, 2025, 3:07pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/32 "2025-10-21T15:07:25Z")

</div>

**Subject:** VA job processing locked - charon service crash loop prevents container startup

**Issue Summary:** The Virtual Appliance appears to have jobs locked due to the charon service repeatedly throwing an error every 30 seconds, preventing normal operation. Only 2 of 8 expected containers are running (charon and va\_agent). Missing containers include: fluent/va, toolbox, ccg and on.

**Error Details:**

```auto
NoMethodError: undefined method `include?' for nil
/opt/sailpoint/lib/configuration.rb:499:in `write_fluent_conf'

```

The charon service crashes during the `write_fluent_conf` method when attempting to execute:

ruby

```auto
creds[:sc]['vaDownloadUrl'].include?('sptcbu') ? dev = true : dev = false

```

When `vaDownloadUrl` is nil, the `.include?()` method call fails, causing the Ruby script to crash. This prevents charon from completing its configuration loop, which blocks:

- Job execution

- Container startup

- Normal VA operation

**Root Cause:** The VA is running an outdated charon image:

- **Current image on broken VA:** `406205545357.dkr.ecr.us-east-1.amazonaws.com/sailpoint/charon:latest`

- **Current image on working VAs:** `706944607044.dkr.ecr.us-east-1.amazonaws.com/sailpoint/charon:current`

**Code Comparison:**

- **Old code (line 499, broken):** Checks if download URL contains ‘sptcbu’

- **New code (line 607, fixed):** Checks if pod is in DEV\_PODS constant - `DEV_PODS.include?(creds[:config]['pod'])`

**Resolution Needed:** The VA needs to be updated to pull from the correct ECR registry (`706944607044`) and update to the current charon image that contains the bug fix.

---

<div class="post-metadata">

**Author:** ![SteinerBBQ](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/steinerbbq/32/29213_2.png) [@SteinerBBQ](https://developer.sailpoint.com/discuss/u/SteinerBBQ)\
**Post date:** [October 21, 2025, 3:08pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/33 "2025-10-21T15:08:52Z")

</div>

I didn’t get a chance to look at it until today since I use ARM Mac and I can’t get OVA to run on a virtual Windows machine. Had to get my hands on a Windows laptop with VMWare. But there you go. Issue with the charon image being older and expecting the vaDownloadUrl. Till they fix that the va-latest won’t work for us.

---

<div class="post-metadata">

**Author:** ![JackSparrow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jacksparrow/32/19685_2.png) [@JackSparrow](https://developer.sailpoint.com/discuss/u/JackSparrow)\
**Post date:** [October 21, 2025, 3:29pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/34 "2025-10-21T15:29:26Z")

</div>

Thanks @SteinerBBQ! Appreciate your detailed analysis on this. @tyler_mairose Hope this helps demo hub team to fix the issue.

---

<div class="post-metadata">

**Author:** ![tyler\_mairose](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/tyler_mairose/32/30112_2.png) [@tyler\_mairose](https://developer.sailpoint.com/discuss/u/tyler_mairose)\
**Post date:** [October 21, 2025, 5:16pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/35 "2025-10-21T17:16:28Z")

</div>

Thank you @SteinerBBQ, I added your comments to the Triage ticket created!

---

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [October 23, 2025, 5:43pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/36 "2025-10-23T17:43:40Z")

</div>

I run into this problem today. I could not make VA work, but got a workaround. I downloaded VA from some client tenant. It worked fine in my partner tenant.

It appears that VA images from client and partners/demo tenants are not the same.

---

<div class="post-metadata">

**Author:** ![JackSparrow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jacksparrow/32/19685_2.png) [@JackSparrow](https://developer.sailpoint.com/discuss/u/JackSparrow)\
**Post date:** [November 1, 2025, 11:57am UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/37 "2025-11-01T11:57:47Z")

</div>

@tyler_mairose . Any updates on the triage ticket? Want to know when the issue will be fixed

---

<div class="post-metadata">

**Author:** ![aleksander\_jachowicz](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/aleksander_jachowicz/32/22938_2.png) [@aleksander\_jachowicz](https://developer.sailpoint.com/discuss/u/aleksander_jachowicz)\
**Post date:** [November 9, 2025, 7:03pm UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/38 "2025-11-09T19:03:48Z")

</div>

Same here. Any news?

---

<div class="post-metadata">

**Author:** ![Abhishek\_1995](https://avatars.discourse-cdn.com/v4/letter/a/d26b3c/32.png) [@Abhishek\_1995](https://developer.sailpoint.com/discuss/u/Abhishek_1995)\
**Post date:** [November 10, 2025, 2:56am UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/39 "2025-11-10T02:56:14Z")

</div>

Hi @aleksander_jachowicz ,

Could you please try to create a new cluster once again? and check whether ccg is coming or not and wait for 30 mints.

Thank you.

---

<div class="post-metadata">

**Author:** ![punna0001](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/punna0001/32/42011_2.png) [@punna0001](https://developer.sailpoint.com/discuss/u/punna0001)\
**Post date:** [November 11, 2025, 4:23am UTC](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836/40 "2025-11-11T04:23:08Z")

</div>

@aleksander_jachowicz Just checking for any update?  
I am also facing the same issue on the demo tenant.

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/5/a/5a7b3e9db4dd4cca0b77c17aa36c668f140765cf.png)

[Previous page](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836.md?page=1)

[Next page](https://developer.sailpoint.com/discuss/t/ccg-in-new-va-not-present/184836.md?page=3)
