NetWitness Upgrade Precheck - Puppet CA probe - Checks Truststore.pem file for outdated Puppet CA certificates

[#1]

Article Number

000003180

Applies To

 NetWitness Product Set: NetWitness Platform
 NetWitness Product/Service Type: All Nodes
 NetWitness Version/Condition: 12.0 or later
 Platform: CentOS/Alma

Issue

The Precheck tool is unable to complete successfully due to warnings generated by the probe that checks for the presence of the Puppet CA in the Truststore.pem file on the Admin Server.

Cause

The failure happened because there is an outdated Puppet CA certificates in the Truststore.pem file.

Resolution

If the Puppet CA is outdated or expired, certificates must be identified and removed to prevent any potential issues caused during the upgrade.
 

1. To check if the Puppet CA exists and if its expired or not, run the following command:

keytool -printcert -file /etc/pki/nw/trust/truststore.pem | awk '/Valid from:/, /until:/ {print} /Puppet CA/'

2. If the output shows that the certificate is expired please contact the NetWitness Customer Support team before proceeding with the upgrade referencing this article.