Fail to upgrade RSA NetWitness Hosts to 11.4.x

Issue

Upgrading non-NW Admin Server host to 11.4.x fails with an error showing in /var/log/netwitness/config-management/chef-solo.log.
Another sample error:

[2020-05-11T17:48:58+00:00] FATAL: Mixlib::ShellOut::ShellCommandFailed: nw_pki_bootstrap_launch[bootstrap rsa-nw-correlation-server] (rsa-correlation-server::bootstrap line 13) had an error: Mixlib::ShellOut::ShellCommandFailed: execute[correlation-server-set-cert-chain] (/var/lib/netwitness/config-management/cache/cookbooks/nw-pki/resources/bootstrap_launch.rb line 274) had an error: Mixlib::ShellOut::ShellCommandFailed: Command execution failed. STDOUT/STDERR suppressed for sensitive resource

Cause

Host's time is out of sync with NW Admin Server time.

Resolution

Adjust host's time to be synchronized with NW Admin Server time and continue to upgrade.

# date
# ntpdate -u nw-node-zero

Sample:

[root@PDEC11 ~]# date
Tue May 12 19:28:59 UTC 2020
[root@PDEC11 ~]# ntpdate -u nw-node-zero
12 May 19:43:05 ntpdate[27354]: step time server 137.69.130.23 offset 819.522721 sec
[root@PDEC11 ~]# date
Tue May 12 19:43:11 UTC 2020
[root@PDEC11 ~]#

---

To manually adjust time without NTP:

# date -s '2020-05-12 19:43:56'

Product Details

RSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance, ESA, Hybrid
RSA Version/Condition: 11.2.x, 11.3.x, 11.4.x

Summary

Orchestration fails if the time on a component host is not synchronized with the time in the nw-node-zero (aka. Head Server, Nw Admin Server).

Approval Reviewer Queue

RSA NetWitness Suite Approval Queue