Error occurs in RSA NetWitness Platform Concentrator Appliance: 'srvList' output shows 'localhost:56005:Connect failed with error unknown state
Issue
This error is revealed when attempting to run srvList during a storage provisioning exercise.Concentrator Appliance: 'srvList' output shows 'localhost:56005:Connect failed with error "unknown state".
Cause
CA Certificate error between devices is expired.
Resolution
- Validate that the error is being caused by issuing the following command:
[root@[root@ABCDEF-CON03 ~]# NwConsole
RSA NetWitness NextGen Console 11.3.1.0
Copyright 2001-2019, RSA Security Inc. All Rights Reserved.
Type "help" for a list of commands or "man" for a list of manual pages.
> login localhost:50006 admin
Password: **********
Successfully logged in to localhost:50006 as session 127131
[localhost:50006] /> appliance srvList
localhost:56005: Connect failed with error "unknown state
- Reviewing /var/log/messages indicate instances of SSL error messages.
[root@[root@ABCDEF-CON03 ~]#tailf /var/log/messages
- Follow the guide for expired certificates and then issue this command to validate that the certificate is expired from the server… https://community.rsa.com/docs/DOC-107280.
[root@[root@ABCDEF-CON03 ~]#ca-expire-test.sh
NW Platform CA Certificate Expiration Date: Dec 30 16:46:02 2019 GMT
NW SSCA Expiration Date: Mar 26 20:01:14 2028 GMT
NW Node Certificate Expiration Date: Feb 15 19:44:35 2022 GMT
#########################################################
You must re-issue certificate within -108 days
#########################################################
- After the procedure has been validated...run the same check as in step 3 once more to identify that the issue has been fixed and the certificate is no longer expired.
Product Details
RSA Product Set: RSA NetWitness PlatformRSA Version/Condition: NetWitness 11.x
Summary
Concentrator Appliance: 'srvList' output shows 'localhost:56005:Connect failed with error unknown state
Approval Reviewer Queue
RSA NetWitness Suite Approval Queue