Provisioning a new RSA Security Analytics host fails with "execution expired" error in puppet agent -t

[#1]

Article Number

000034453

Applies To

RSA Product Set: Security Analytics, NetWitness Logs and Packets
RSA Product/Service Type: Server / Headunit
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x

 

Issue

When deploying new RSA Security Analytics host, the host is not getting discovered in GUI and puppet agent -t fails with the error below.

[root@XXX ~]# puppet agent -t 
Error: Could not request certificate: execution expired
Exiting; failed to retrieve certificate and waitforcert is disabled

Cause

The error highlights that the host is not able to request certificate due to puppetmaster service being unresponsive on the RSA Security Analytics server.

Resolution

Follow the steps below to resolve the issue.

1. Connect to the RSA Security Analytics server appliance via SSH as the root user.
2. Run the commands below in sequence.

   service puppetmaster stop
   service puppetmaster start
   puppet agent -t

3. Connect to the new host via SSH as the root user.
4. Issue the command puppet agent -t to confirm that the "execution expired" error is no longer reported.