000038859 - RSA NetWitness not booting after upgrading to 11.4.x dependency failed for /boot

Document created by RSA Customer Support Employee on May 20, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000038859
Applies ToRSA Product Set: RSA NetWitness Platform
RSA Product/Service Type: Core Appliance
RSA Version/Condition: 11.4.x
Platform: CentOS
Platform (Other): NetWitness Series 4S appliance
O/S Version: 7
IssueAfter NetWitness upgrade to 11.4.x and rebooting the appliance to complete the upgrade, the appliance does not come back online.

The appliance console shows that the boot has failed with error "Dependency failed for /boot" and the boot stops at maintenance mode login.

User-added image
CauseSome NetWitness Series 4S appliances were shipped using the internal SD cards as the boot partition.

NetWitness 11.4.x includes an additional security configuration which disables USB storage, like the SD card, so the new OS cannot mount the /boot partition.

Additional Notes:
  1. The following NetWitness Advisory recommends to Customers to re-install NetWitness on these appliances with the SD card disabled in the BIOS, RSA Security Analytics SD Card Bulletin.
  2. The NetWitness Series 4S hardware has reached End of Product Support (EOPS) after June-2019.
    For continued hardware support through to June 2021 Advanced Hardware Replacement maintenance needs to be purchased on top of the normal maintenance contract.

    Reference: Product Version Life Cycle for RSA NetWitness Platform
ResolutionTo fix this at the emergency mode prompt, login with the root password.
If the known root password doesn't work then try the default password, netwitness

In the /etc/modprobe.d/ directory look for the file, disable-usb-storage.conf, move or remove the file, and then reboot the appliance.

mv /etc/modprobe.d/disable-usb-storage.conf /root/disable-usb-storage.conf

The OS should now be able to see the SD card and boot with the new kernel version.
WorkaroundAnother temporary work-around is to boot the appliance with the old kernel.

Reboot the appliance and monitor the appliance console for the appearance of the Grub Menu.

User-added image

Press the down arrow key to select the previous kernel version and then press Enter.
NotesThis fix might get reversed with the next kernel update in a future NetWitness version upgrade.
It is highly recommended to rebuild the appliance with the SD cards disabled.