000015482 - Upgrade issue from RCM 6.7 to 6.8 with error on CMP

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000015482
Applies ToRSA Certificate Manager 6.8
Sun Solaris 2.8
IssueUpgrade issue from RCM 6.7 to 6.8 with error on CMP
RCM upgrade error:
CallCMPServerSetup: Caught XDK Exception.

--- InvokeExternlCommand: Error executing the following command

["./cmp-setup" -d2 -f icmpserver.log "/opt/rsa/RSA_CM/CmpServer/conf


Get the following in the upgrader.log

 

2010.04.16-19:40: --------------------------------------------------------

2010.04.16-19:40: B E G I N I N S T A L L

2010.04.16-19:40: --------------------------------------------------------

2010.04.16-19:40: Reading command line configuration file...

2010.04.16-19:40: Processing old Log Server configuration file...

2010.04.16-19:40: Processing old Directory configuration file...

2010.04.16-19:40: Processing old Administration configuration file...

2010.04.16-19:40: Processing old CMP Server configuration file...

2010.04.16-19:42: --------------------------------------------------------

2010.04.16-19:42: B E G I N I N S T A L L

2010.04.16-19:42: --------------------------------------------------------

2010.04.16-19:42: Reading command line configuration file...

2010.04.16-19:42: Processing old Log Server configuration file...

2010.04.16-19:42: Processing old Directory configuration file...

2010.04.16-19:42: Processing old Administration configuration file...

2010.04.16-19:42: Processing old CMP Server configuration file...

2010.04.16-19:43: Creating directories in new installation...

2010.04.16-19:43: Copying server certificates and keys...

2010.04.16-19:44: Configuring Secure Directory Server...

2010.04.16-19:44: Indexing database...

2010.04.16-19:44: This may take a while. Please be patient.

2010.04.16-20:51: Configuring CMP server...

2010.04.16-20:51: CallCMPServerSetup: Caught XDK Exception.

--- InvokeExternlCommand: Error executing the following command

["./cmp-setup" -d2 -f icmpserver.log "/opt/rsa/RSA_CM/CmpServer/conf/icmpserver.conf"]

2010.04.16-20:51: Install: Caught XDK Exception.

--- InvokeExternlCommand: Error executing the following command

["./cmp-setup" -d2 -f icmpserver.log "/opt/rsa/RSA_CM/CmpServer/conf/icmpserver.conf"]

 

 

and the following in the icmpserver.log

sudo cat /opt/rsa/RSA_CM/CmpServer/bin/icmpserver.log

Reading configuration parameters.

Reading configuration from file [/opt/rsa/RSA_CM/CmpServer/conf/icmpserver.conf]

Checking network.

Confirming existence of target directories:

/opt/rsa/RSA_CM/CmpServer/conf

/opt/rsa/RSA_CM/CmpServer/ssl/private

/opt/rsa/RSA_CM/CmpServer/ssl/certs

/opt/rsa/RSA_CM/CmpServer/logs

/opt/rsa/RSA_CM/CmpServer/state

*** Operation failed. ***

[XrcDECRYPTIONFAILURE: unable to complete decryption operation]


Copied the Upgrader directory into the 6.7 build and then ran the UPGRADE script. Ran the install script in the 6.8 build it gets around 2.5 hours into the xu_ldbmcat process and then asks for the SSL passphrase and enter it and it fails but still looks like it's rebuilding the ldif.

Resolution

Not using a HSM for ssl certificates, so removed this line in cmp conf file:

cmp-usePED "system-usePED"



Resigned all the system CA's and SSL certificares and upgrade worked without an issue.

Legacy Article IDa50712

Attachments

    Outcomes