/mcpProcesses and Threads. This can occur because a product which was integrated into Cisco Unified Communications Manager has been disabled or deactivated, which reduces the total number of processes and threads running on the system. Another cause for the number of processes or thread to decrease is that one or more processes has been stopped, which reduces the total number of processes and threads running on the system. Recommended Action This alarm is for information purposes only; no action is required. Error Message %UC_DRF-3-DRFTruststoreMissing: %[Reason=String][AppID=String][ClusterID=String] [NodeID=String]: DRF uses ipsec truststore certificate for securing communication between the MA and LA service. This certificate is missing on the node. Explanation DRF uses ipsec truststore certificate for securing communication between the MA and LA service. This certificate is missing on the node, DRF LA will not be able to connect to MA Recommended Action Download ipsec.pem file from Publisher and upload it as ipsec-trust only on the missing node then restart Cisco DRF Local service. Error Message %UC_DRF-3-DRFUnknownClient: %[Reason=String][AppID=String][ClusterID=String] [NodeID=String]: The DRF Master Agent running on the Publisher has received a Client connection request from an unknown server outside the cluster.The request has been rejected. Explanation The DRF Master Agent running on the Publisher has received a Client connection request from an unknown server outside the cluster.The request has been rejected. Recommended Action Remove the suspect server from the network. Refer to the Reason section for suspect servers: Hostname and IP Address Error Message %UC_DRF-3-DRFSecurityViolation: %[Reason=String][AppID=String][ClusterID=String] [NodeID=String]: The DRF System has detected a malicious pattern which could result in a security violation. Explanation The DRF Network Message contains a malicious pattern which could result in a security violation like code injection or directory traversal. DRF Network Message has been blocked. Recommended Action Stop the Cisco DRF Master and Cisco DRF Local Agent Services Error Message %UC_DRF-3-DRFMasterAgentStartFailure: %[Reason=String][AppID=String][ClusterID=String] [NodeID=String]: DRF Master Agent was unable to start because it was unable to open port 4040.. Explanation DRF Master Agent was unable to start because it was unable to open port 4040. Recommended Action Check if port 4040 is not already in use. Error Message %UC_DRF-3-DRFLocalAgentStartFailure: %[Reason=String][AppID=String][ClusterID=String] [NodeID=String]: DRF Local Agent was not able to start because it was unable to connect to the Master Agent on port 4040. Explanation DRF Local Agent was not able to start because it was unable to connect to the Master Agent on port 4040 Recommended Action Check if the CiscoDRFMaster and CiscoDRFLocal services are running 5/24/26, 3:34 AM System Error Messages for Cisco Unified Communications Manager 15 - Cisco https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/err_msgs/15_x/ccmalarms15.html 92/343