000037119 - RSA Archer upgrade fails due to "RSAArcherConfigurationService: An error occurred while trying to start the service."

Document created by RSA Customer Support Employee on Jan 28, 2019
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000037119
Applies ToRSA Product Set: Archer
RSA Product/Service Type: RSA Archer (On-Premise)
RSA Version/Condition: 6.4.0.2, 6.4.1.3, 6.5., 6.5.0.1
IssueDuring installation, the following error is presented:

User-added image


Additionally, the following additional problems were observed after this installation failure occurred:
  • The selected components during installation did not install.
  • The web component is not upgraded to the latest version
  • The Archer control Panel no longer starts properly.
  • The RSA Archer Configuration Service will not start.
  • The RSA Archer site is not accessible on this server.
CauseThe Service account specified to run the Archer Services does not have "Run as a Service Permissions"

Additionally, the following is logged into the FrameworkInstall.log file.

C:\Program Files\Java\jre1.8.0_45\bin\keytool.exe -importcert -keystore "C:\Program Files\RSA Archer\Services\GemFire\RSA_Archer\Config\Server\Certificates\RSAArcherConfigurationTrustStore" -alias myalias -file "C:\Users\ArcherService\AppData\Local\Temp\tmpE276.tmp.cer" -storepass CPObtn6Q6AZVblbaX -noprompt
Certificate was added to keystore

Work point registries created.
System.Security.Cryptography.CryptographicException: Invalid provider type specified.

   at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)
   at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle)
   at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()
   at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize)
   at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey()
   at Archer.Installer.CertificateHelper.AddAccessToCertificate(X509Certificate2 certificate, SecurityIdentifier sid)
   at Archer.Installer.Pages.PerformInstallationPage.InstallAWFCertificate()
Symbolic Link directory to ArcherAssemblies was created.
Executing Configuration Service Config Migrator. Starting at 6:16:55 PM
Configuration Service Config Migrator completed successfully. Ending at 6:16:55 PM
Archer.Installer.Migration.ConfigDbMigrator completed successfully. Ending at 6:16:55 PM
Executing Archer.Installer.Migration.WorkpointConfigMigrator. Starting at 6:16:55 PM
Archer.Installer.Migration.WorkpointConfigMigrator completed successfully. Ending at 6:16:55 PM
System.Exception: "RSAArcherConfigurationService: An error occurred while trying to start the service." ---> System.InvalidOperationException: Cannot start service RSAArcherConfigurationService on computer '.'. ---> System.ComponentModel.Win32Exception: The service did not start due to a logon failure
   --- End of inner exception stack trace ---
   at System.ServiceProcess.ServiceController.Start(String[] args)
   at SetupUtils.Services.ServiceUtils.StartService(String serviceName, String displayName)
   --- End of inner exception stack trace ---
   at SetupUtils.Services.ServiceUtils.StartService(String serviceName, String displayName)
   at Archer.Installer.Pages.PerformInstallationPage.InstallServices()
   at Archer.Installer.Pages.PerformInstallationPage.OnWizardNext(WizardPageEventArgs e)
Inner exception:
System.InvalidOperationException: Cannot start service RSAArcherConfigurationService on computer '.'. ---> System.ComponentModel.Win32Exception: The service did not start due to a logon failure
   --- End of inner exception stack trace ---
   at System.ServiceProcess.ServiceController.Start(String[] args)
   at SetupUtils.Services.ServiceUtils.StartService(String serviceName, String displayName)
Inner exception:
System.ComponentModel.Win32Exception (0x80004005): The service did not start due to a logon failure
System.Exception: "RSAArcherConfigurationService: An error occurred while trying to start the service." ---> System.InvalidOperationException: Cannot start service RSAArcherConfigurationService on computer '.'. ---> System.ComponentModel.Win32Exception: The service did not start due to a logon failure
   --- End of inner exception stack trace ---
   at System.ServiceProcess.ServiceController.Start(String[] args)
   at SetupUtils.Services.ServiceUtils.StartService(String serviceName, String displayName)
   --- End of inner exception stack trace ---
   at SetupUtils.Services.ServiceUtils.StartService(String serviceName, String displayName)
   at Archer.Installer.Pages.PerformInstallationPage.InstallServices()
   at Archer.Installer.Pages.PerformInstallationPage.OnWizardNext(WizardPageEventArgs e)
Inner exception:
System.InvalidOperationException: Cannot start service RSAArcherConfigurationService on computer '.'. ---> System.ComponentModel.Win32Exception: The service did not start due to a logon failure
   --- End of inner exception stack trace ---
   at System.ServiceProcess.ServiceController.Start(String[] args)
   at SetupUtils.Services.ServiceUtils.StartService(String serviceName, String displayName)
Inner exception:
System.ComponentModel.Win32Exception (0x80004005): The service did not start due to a logon failure


 
ResolutionAs per Archer installation guide, the Service account must be granted "Run As a Service" permissions.
Note that accounts in the Administrators group are not automatically granted "Run As a Service" permissions.

On each Archer server:
  1. Run secpol.msc. 
  2. In the left pane navigate to Security Settings - Local policies - User rights assignment. 
  3. Double click Log on as a service entry in the right pane and add the account you want to use a service one. 
  4. Click OK to apply.
  5. Reboot the server.

Attachments

    Outcomes