Troubleshooting Installation and Upgrade Issues in 12.4

1. Manually modify the GRUB boot line to FIPS=0 to get it to boot.

2. From here, disable FIPS using the following command:

   manage-stig-controls --disable-control-groups 3 --host-all

3. Verify the line FIPS=1 is removed from /boot/grub2/grub.cfg

• If not, run the following command:

  grub2-mkconfig -o /boot/grub2/grub.cfg

4. Reboot.

5. Run the following command to enable FIPS:

   manage-stig-controls --enable-control-groups 3 --host-all

6. Reboot again.

Reset your deploy_admin password password. Do the following.

1. On the NW Server host only, run the following command.
   nw-manage --update-deploy-admin-pw
   Please enter the new deploy_admin account password:
   Please confirm the new deploy_admin account password:
2. Review the output of the nw-manage --update-deploy-admin-pw command to verify the deploy_admin password was successfully updated on all hosts. If an NW host is down or fails for any reason as displayed by the output of the nw-manage --update-deploy-admin-pw command, run nw-manage --sync-deploy-admin-pw --host-key to synchronize the password between the NW Server and the host that failed once the communication failure is resolved.
3. On the host that failed installation or orchestration, run the nwsetup-tui command and use the new deploy_admin password in response to the Deployment Password prompt.

1. Try to update again.

2. If it fails again with the same error, try to update using the offline methods as described in "Offline Method from Hosts View" or "Offline Method Using Command Line Interface" in the Upgrade Guide for NetWitness Platform. Go to the NetWitness All Versions Documents page and find NetWitness Platform guides to troubleshoot issues.

3. If you are still not able to update, contact Customer Support.

If you are upgrading from NetWitness Platform 11.x.x.x to 11.6.x.x or later, offline UI upgrade fails with the Download error message.

1. In the Command Line Interface (CLI), do the following:

   1. SSH to NW Server.

   2. Run the following command:
      upgrade-cli-client --upgrade --host-key --version
      For example:
      upgrade-cli-client --upgrade --host-key --version 11.6.0.0
2. After the NW Server is successfully updated, log in to the NW Server user interface and go to (Admin) > Hosts, where you are prompted to reboot the host.

3. Click Reboot Host from the toolbar.

   To upgrade all the other hosts directly from the user interface:

   1. Click Begin Update from the Update Available dialog.
      After the host is upgraded, it prompts you to reboot the host.
   2. Click Reboot Host from the toolbar.

Error deploying version is displayed in the Initialize Update Package for NetWitness Platform dialog after you click on Initialize Update if the update package is corrupted.

1. Click Close to close the dialog.

2. Remove the version folder from staging folder.

3. Make sure that the salt-master service is running.

4. Recopy the update package zip file to the staging folder.

5. In the Hosts view toolbar, select Check for Updates again.
   

6. Click Initialize Update.
7. Click Update > Update Hosts from the toolbar.
8. Click Begin Update from the Update Available dialog.
   After the host is updated, it prompts you to reboot the host.
9. Click Reboot from the toolbar.

You will receive an error in the error log similar to the following while trying to update to version 11.6 or later:

To resolve the issue:

1. SSH to Admin Server.
2. Locate the component descriptor file by running the following command.
   cd /etc/netwitness/component-descriptor/
3. Open the component descriptor file by running the following command.
   vi nw-component-descriptor. json
4. Search for “packages” section for the component you have custom build/rpm. For example, below shown is the package details for “concentrator” host that has custom build/rpm.
   “concentrator”: {
   “cookbook_name”: “rsa-concentrator”,
   “service_names”: [“rsa-nw-concentrator”],
   “family”: “launch”,
   “default_port”: xxxx, “description”: “Concentrator”,
   “packages”:[{ “name”: “rsa-nw-concentrator”,
   “version” : “11.6.0.0-2003001075220.5.cecf24b.e.17.centos”
   },
5. Delete the complete version details including (,) character in the packages section. For example, it should look like as shown below after you delete the version details.
   “packages”: [{
   “name”: “rsa-nw-concentrator”
   },

Note: You must delete the version details for all the host that has custom builds/rpms in the component descriptor of the admin server.

1. Run the upgrade process again.

You will receive an error similar to the following error while trying to update to a new version from the :
.Repository 'nw-rsa-base': Error parsing config: Error parsing "baseurl = 'https://nw-node-zero/nwrpmrepo / /RSA'": URL must be http, ftp, file or https not ""

Make sure that:

• the URL does exist on the NW Server host.
• you used the correct path and remove any spaces from it.

1. Try to apply the version update to the host again.
   Often this is all you need to do.
2. If you still cannot apply the new version update:
   Monitor the following logs on NW Server as it progresses (for example, run the tail -f command from the command line):
   /var/netwitness/uax/logs/sa.log
   /var/log/netwitness/orchestration-server/orchestration-server.log
   /var/log/netwitness/deployment-upgrade/chef-solo.log
   /var/log/netwitness/config-management/chef-solo.log
   /var/lib/netwitness/config-management/cache/chef-stacktrace.out
   The error appears in one or more of these logs.
3. If you still cannot apply the update, gather the logs from step 2 above and contact Customer Support.

1. Make sure the Live test connection passes.

   1. Update https://update.netwitness.com/RSA-netwitness in (Admin) > System > Updates.

2. SSH to the Admin Server and backup /etc/default/jetty.

3. Update the following entry at the end of the JAVA_OPTIONS in the /etc/default/jetty.

   JAVA_OPTIONS="${JAVA_OPTIONS} -Drsa.nw.legacy.web.server.system.update.repo.url=https://update.netwitness.com/RSA-netwitness/ -Drsa.nw.legacy.system.update.auth.url=https://update.netwitness.com/authenticate "

4. Restart the jetty service. Run the following command.

   service jetty restart

Initialize Update for Version xx.x.x.x
Missing the following update package(s)

Download Packages from NetWitness Link

1. Click Download Packages from NetWitness Community in the Initialize Update Package for NetWitness Platform dialog.
   The NetWitness Community page that contains the update files for the selected version is displayed.

2. Select the missing packages from the staging folder.
   The Initialize Update Package for NetWitness Platform dialog is displayed telling you that it is ready to initialize the update packages.