000014617 - The system hostname key is missing from the lockbox in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000014617
Applies ToRSA Security Analytics
RSA Security Analytics Virtual Log Collector
IssueThe system hostname key is missing from the lockbox in RSA Security Analytics.

Errors similar to the following are displayed:



RemoteVLC nw[3780]: [EncryptionWrapper] [info] key was not found: failed to open lockbox: The system hostname key is missing from the lockbox.
RemoteVLC nw[3780]: [EncryptionWrapper] [failure] failed to open lockbox: The system hostname key is missing from the lockbox.
RemoteVLC nw[3780]: [SdeeCollection] [failure] caught exception while creating new collection configuration: failed to open lockbox: The system hostname key is missing from the lockbox



Unable to integerate any new event source with VLC.
CauseThis issue is due to virtual hardware changes on the VLC, such as being migrated to another ESXi box as part of HA or Disaster Recovery process.
Resolution

This issue can be resolved by resetting the Stable System Value, following the steps below.


  1. Login to Security Analytics UI with Admin access.
  2. In the Security Analytics menu, select Administration > Devices.
  3. In the Devices grid, select a Log Collector device.
  4. In the toolbar, select View > Config.
  5. Click the Settings tab.
  6. In the options panel, select Lockbox to maintain Lockbox setting.
  7. Re-enter the lockbox password for "Reset Stable System Value" and click Apply.

 


If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article ID for further assistance.

NotesRefer to the knowledgebase article How to create a new Log Collector lockbox within RSA Security Analytics to reset an existing lockbox password.
Legacy Article IDa66522

Attachments

    Outcomes