NetWitness Upgrade Precheck - Admin Certificate Check

[#1]

Article Number

000003164

Applies To

RSA Product Set: NetWitness Platform
RSA Product/Service Type: All Nodes
RSA Version/Condition: 12.0 or later
Platform: CentOS

Issue

Preupgrade check tool shows Admin-cert check probe failed as below:
Error screenshot:

Image description

Cause

This probe fails if one of the below conditions are met:

• If there is a mismatch of admin-certificates in node-0 (admin server) and node-x (all other servers).
• If the permissions are incorrect for admin-cert.pem.

Resolution

Please follow below instructions to fix the probe error :
The ‘admin-cert’ is expected to be the same as the ‘admin server’ across the entire environment.

1. Copy the ‘admin-cert.pem’ certificate from the admin server (/etc/pki/nw/peer/admin-cert.pem) to all the node-x servers and and paste it into the same directory location /etc/pki/nw/peer/ where ‘admin-cert.pem’ is not matching.

2. If the permissions are incorrect, manually update the permissions using the following commands:

   # cd /etc/pki/nw/peer/
   # chown netwitness:nwpki admin-cert.pem
   

3. The file permissions will look like the following:

# ll /etc/pki/nw/peer/admin-cert.pem
-rw-r-----. 1 netwitness nwpki 1725 Dec 28 06:46 /etc/pki/nw/peer/admin-cert.pem

​​​​​