000034453 - Provisioning a new RSA Security Analytics host fails with "execution expired" error in puppet agent -t

Document created by RSA Customer Support Employee on Nov 29, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000034453
Applies ToRSA Product Set: Security Analytics, NetWitness Logs and Packets
RSA Product/Service Type: Server / Headunit
RSA Version/Condition: 10.4.x, 10.5.x, 10.6.x
 
IssueWhen deploying new RSA Security Analytics host, the host is not getting discovered in GUI and puppet agent -t fails with the error below.
[root@XXX ~]# puppet agent -t 
Error: Could not request certificate: execution expired
Exiting; failed to retrieve certificate and waitforcert is disabled
CauseThe error highlights that the host is not able to request certificate due to puppetmaster service being unresponsive on the RSA Security Analytics server.
ResolutionFollow the steps below to resolve the issue.
  1. Connect to the RSA Security Analytics server appliance via SSH as the root user.
  2. Run the commands below in sequence.
    service puppetmaster stop
    service puppetmaster start
    puppet agent -t

  3. Connect to the new host via SSH as the root user.
  4. Issue the command puppet agent -t to confirm that the "execution expired" error is no longer reported.

Attachments

    Outcomes