NwAppliance service crashes are causing the creation of Core files in RSA Security Analytics

Issue

The NwAppliance service is creating Core files which produces the errors logged below from /var/log/messages:

 Jan 19 21:02:57 HOST nw[17046]: [Appliance] [failure] Unsolicited IPMI command response, no response expected.

The user may also see failures in NwAppliance due to IPMI (Intelligent Platform Management Interface).

The user may confirm the BIOS version installed on the appliance at the Command Line Interface using the following command:

 [~]# cat /var/log/dmesg | grep -i dell
 
DMI: Dell Inc. PowerEdge R620/0KFFK8, BIOS 1.1.2 03/08/2012

The user may also confirm the BIOS version installed on the appliance at the iDRAC WebUI if active.

Cause

An older version of the Dell BIOS (1.1.2) is causing the NwAppliance service to crash and cause Core files.

The user can confirm the BIOS version installed on the appliance at the Command Line Interface using the following command:

 [~]# cat /var/log/dmesg | grep -i dell
 
DMI: Dell Inc. PowerEdge R620/0KFFK8, BIOS 1.1.2 03/08/2012

The user may also confirm the BIOS version installed on the appliance at the iDRAC WebUI if active.

Resolution

To resolve the issue, follow the instructions in the article Firmware Updates for Dell BIOS SAS iDRAC LC for R620 RSA Security Analytics Appliances to update the BIOS to BIOS version: 2.2.3.

Internal Comments

Internal KB 28971 was provided by the Hardware platform team in Hopkinton.
The wording of KB 28971 requires editing to make it more clear and to make sure the RAID controller BIOS updates are the expected version but the KB does work.

Paul Thornton -- 4 May 2016
The internal KB mentioned above would not be able to be edited as it was updated by Lee McCotter in February and is still waiting for approval.

Product Details

RSA Product Set: Security Analytics
RSA Version/Condition: 10.5.1.2
Platform: CentOS
O/S Version: EL6

Approval Reviewer Queue

Technical approval queue