RSA NetWitness Node-0 Certificates Check

[#1]

Article Number

000039866

Applies To

RSA Product Set: NetWitness Platform, NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.4.0.0 and Later
Platform: CentOS 7

Issue

Service or CA Certificate expired.
Precheck tool fails with the error message “certs are expired” if any of the certificates are missing or invalid issuer type.

Resolution

If the certificate is already expired, you must refer the below links for resolution:

• Certificate Rescue 

 https://community.rsa.com/t5/netwitness-platform-knowledge/rsa-netwitness-hosts-and-services-appear-offline-in-ui-due-to/ta-p/609118

• Certificate Re-issue

https://community.rsa.com/t5/netwitness-platform-online/sys-maintenance-reissue-certificates/ta-p/570685

If the certificate is about to expire, you must refer the below link for resolution.

• Certificate Reissue

https://community.rsa.com/t5/netwitness-platform-online/sys-maintenance-reissue-certificates/ta-p/570685

• Update Root CA (Only if Root CA is about to expire)

https://community.rsa.com/t5/netwitness-platform-knowledge/reissue-root-ca-security-certificates-on-rsa-netwitness-platform/ta-p/45

• If the certificate is missing or invalid, contact RSA Customer Support.