This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject

NetWitness Community

  • Home
  • Products
    • NetWitness Platform
      • Advisories
      • Documentation
        • Platform Documentation
        • Known Issues
        • Security Fixes
        • Hardware Documentation
        • Threat Content
        • Unified Data Model
        • Videos
      • Downloads
      • Integrations
      • Knowledge Base
    • NetWitness Cloud SIEM
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Detect AI
      • Advisories
      • Documentation
      • Knowledge Base
    • NetWitness Investigator
    • NetWitness Orchestrator
      • Advisories
      • Documentation
      • Knowledge Base
      • Legacy NetWitness Orchestrator
        • Advisories
        • Documentation
  • Community
    • Blog
    • Discussions
    • Events
    • Idea Exchange
  • Support
    • Case Portal
      • Create New Case
      • View My Cases
      • View My Team's Cases
    • Community Support
      • Getting Started
      • News & Announcements
      • Community Support Forum
      • Community Support Articles
    • Product Life Cycle
    • Support Information
    • General Security Advisories
  • Training
    • Blog
    • Certification Program
    • Course Catalog
    • New Product Readiness
    • On-Demand Subscriptions
    • Student Resources
    • Upcoming Events
  • Technology Partners
  • Trust Center
Sign InRegister Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Knowledge Base
Find answers to your questions and identify resolutions for known issues with knowledge base articles written by NetWitness experts.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Announcement Banner

Users are unable to open Netwitness Support Cases via email. Please open support cases via portal or by phone

View Details
  • NetWitness Community
  • Knowledge Base
  • Data should be backed up before upgrading an RSA ECAT environment
  • Options
    • Subscribe to RSS Feed
    • Bookmark
    • Subscribe
    • Email to a Friend
    • Printer Friendly Page
    • Report Inappropriate Content

The content you are looking for has been archived. View related content below.

Data should be backed up before upgrading an RSA ECAT environment

Article Number

000001454

Applies To

RSA Product Set: ECAT
RSA Product/Service Type: Server, Client, SQL Database
RSA Version/Condition: 4.x
Platform: Windows
Platform (Other): Microsoft SQL Server

Issue

 The purpose of this KB article is to help make the ECAT upgrade process a seamless experience and to avoid data loss if the upgrade should fail.

Resolution

Before performing an upgrade, it is strongly recommended to do the following:
  1. Back up all Microsoft SQL Server ECAT databases.  (Primary and Secondary) and transactions logs for said databases.
  2. Backup ECAT certificates (see ECAT Install Guide for specific directions on how to export ECAT CA certificates)
  3. Create a backup copy files located in the ECAT Install folder (<Drive>\ECAT\Server folder) 
    • km,km.FCD
    • ConsoleServer.exe, ApiServer.exe (file extension of CONF, or .XML) 
    • ECAT license file (file extension is .LIC)
  4. Export a copy of the Whitelist/Blacklist file(ECAT UI -> Tools -> Import/Export xml file -> export Whitelist/Blacklist file
Very Important:
Sufficient free space for the transaction log file to grow. You need 2x the current size of the transaction log file. This is very important, if the transaction log cannot grow, the upgrade will fail and the database will be in an unrecoverable state.

 Steps to perform prior to the upgrade:
 
  1. Stop the SQL Agent Service (verify there are no SQL agent jobs that are running)
  2. Stop the RSA  Console Server Service
  3. Stop the ECAT API service
  4. Close all sessions off the  SQL Management Studio
  5. Close all instances of the ECAT UI

Note: if you are upgrading to 4.1.x from any version and using MSSQL 2008 database.

Contact RSA Customer support for further directions. There are specific steps needed in order to prepare the database for upgrades to 4.1 and higher versions of ECAT.

If an upgrade fails, contact RSA Support and quote this article number for assistance with restoring from the backup.

Notes

First a word about the naming convention, the numbering system is built on 4 numbers separated by dots (periods). The first digit is the major release number, followed by the minor number, the third digit is the service pack version and the forth the hot fix number. To illustrate, you have ECAT version 4.1.1.1

The number 4, is the major release, number 1 is the minor release version, 1. Is the service pack and the last number 1 is the hot fix number. For ECAT version 4.1.2.0 the breakdown as follows; 4 major release, 1 is minor, 2 is the service pack number since the number is 0. (There have not been any hot fixes released for this version)

Tags (12)
  • Customer Support Article
  • KB Article
  • Knowledge Article
  • Knowledge Base
  • NetWitness
  • NetWitness Platform
  • NW
  • RSA NetWitness
  • RSA NetWitness Platform
  • RSA Security Analytics
  • Security Analytics
  • SIEM
0 Likes
Was this article helpful? Yes No
No ratings

In this article

Version history
Last update:
‎2022-02-10 01:43 PM
Updated by:
Administrator nwinfotech Administrator

Related Content

Powered by Khoros
  • Blog
  • Events
  • Discussions
  • Idea Exchange
  • Knowledge Base
  • Case Portal
  • Community Support
  • Product Life Cycle
  • Support Information
  • About the Community
  • Terms & Conditions
  • Privacy Statement
  • Acceptable Use Policy
  • Employee Login
© 2022 RSA Security LLC or its affiliates. All rights reserved.