000036361 - How to upgrade RSA NetWitness to 11.0 for system that are still utilizing the SD Cards

Document created by RSA Customer Support Employee on May 25, 2018Last modified by RSA Customer Support Employee on Jul 18, 2018
Version 19Show Document
  • View in full screen mode

Article Content

Article Number000036361
Applies ToRSA Product Set: NetWitness Logs and Packets
RSA Product/Service Type: Security Analytics Server
RSA Version/Condition: 11.1
 
 
 
 
 
Issue* We are upgrading the NWServer/SA head from 10.6.5.0 to 11.0.0.0 using iDRAC virtual Media. 
* The system has SD Cards enabled in the BIOS. When we disable the SD cards in the BIOS the upgrade does not detect an eligible root filesystem and only allows to reinstall instead of upgrading.
* When we enable the SD cards in the BIOS the upgrade DOES detect an eligible root filesystem and then it ALLOWS to UPGRADE. However, we should not be using SD cards since 10.4.0.2. 
* As such, there is no mention in the documentation about imaging with SD cards in use since the SDCard has been out of operation since 10.4.02. Customer who has enabled SD cards could have the OS and other partitions installed on the SD cards. More to that, the backup script would have resulted in the SD cards as well. 
 
Resolution Workaround

The workaround propose shows a way to upgrade without further use of the SD card. It includes procedures to disable the SD card and relocating the backup files onto a network share. This way we will able to proceed with the upgrade and have the NetWitness environment running without the use of SD card. 

Assumptions:
    Backup script is on a CentOS 6 system that is NOT the NetWitness Server (in our case we used archiver)
    Backups will reside on CentOS 6 System that is NOT the NetWitness Server (in our case we used the archiver)
    
    

Make Backups using nwbackup script 4.0 with -u switch
insert buildstick or iso using iDRAC
reboot system
Press F10
Disable SD Cards in BIOS (For more detailed information on disabling SD Cards in BIOS check this article on buildsticking 10.4.0.2B)
Reboot
Press F11
Bios Boot manager
Boot from Buildstick/Virtual Media
User-added image
Press Enter to install 11.x
Type "y" to clear disk configuration
User-added image
User-added image
Reboot
Press F11
Bios Boot manager
Boot from Buildstick/Virtual Media
Press Enter to install 11.x


Type "n"
Type "R" to Reinstall
User-added image

    Base OS Will install
    System will Reboot Automatically
User-added image
Login as "root"
    Password is "netwitness"
User-added image
User-added image
Configure networking
    type "netconfig -p" -- this will show the network interfaces
User-added image
    type netconfig --interface <interface from -p here> --static --ip <system ip here> --netmask <system net mask here> --gateway <network gateway here> --verbose
    netconfig --interface eth0 --static --ip 10.0.0.67 --netmask 255.255.255.0 --gateway 10.0.0.1 --verbose
User-added image
Create backup directories
    mkdir /var/netwitness/database
    mkdir /var/netwitness/database/nw-backup
User-added image
Copy backup files from the backup server
    scp 10.0.0.20:/var/netwitness/database/nw-backup/2018-05-15/saserver60* /var/netwitness/database/nw-backup
    scp 10.0.0.20:/var/netwitness/database/nw-backup/2018-05-15/all-systems-master-copy /var/netwitness/database/nw-backup
    scp 10.0.0.20:/var/netwitness/database/nw-backup/2018-05-15/esa60-10.0.0.63-controldata-* /var/netwitness/database/nw-backup
User-added image
User-added image
User-added image
Run Setup from iDRAC Console as it takes a long time, 1 hour or more in vm environment.  putty is dependent on a reliable network connection.
    nwsetup-tui
User-added image
    Accept agreement
    Yes - 11.1 NWServer
User-added image
    2 - Upgrade (From Previous Vers.)
    OK
User-added image
User-added image

    Verify Backup Directory /var/netwitness/database/nw-backup
    Create Master Password
    OK
    Create Deploy Password
    OK
    1 - The Local Repo (on the NW Server)
    OK
    Apply Custom firewall Rules
    NO
    1 - Upgrade Now
    OK
    OK

Reboot host after install finishes
System will be successfully migrated
User-added image
User-added image
 

Attachments

    Outcomes