Authentication Manager 8.5 upgrade to 8.6 fails with error: Unactivated changes are present in the WebLogic Server config.xml
2 years ago
Article Number
000067954
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x
Issue

When upgrading Authentication Manager from 8.5 to 8.6, the upgrade fails with the following error:

29187  2022-08-31 22:36:15,619 INFO: R240 Pre-upgrade checks completed.
29187  2022-08-31 22:36:15,619 INFO: Performing preUpdate task InvokeGroovy (Weblogic config.xml health pre-upgrade checks)
29188  2022-08-31 22:36:15,620 INFO: Begin validation of weblogic server config.xml pre-upgrade checks.
Exception in thread "main" java.lang.RuntimeException: Unactivated changes are present in the WebLogic Server config.xml (/opt/rsa/am/server/pending/config.xml). This needs to be corrected before proceeding with the upgrade. For instructions, contact RSA Customer Support.
    at UpdateRollback.preUpdate_InvokeGroovy_Weblogic_config_xml_health_pre_upgrade_checks(UpdateRollback.groovy:215)
    at UpdateRollback$_preUpdate_closure1.doCall(UpdateRollback.groovy:22)
    at UpdateRollback$_preUpdate_closure1.doCall(UpdateRollback.groovy)
    at Utils.withArtifacts(Utils.groovy:48)
    at Utils$withArtifacts$5.call(Unknown Source)
    at UpdateRollback.preUpdate(UpdateRollback.groovy:12)
    at com.rsa.plugins.install.GroovyInstallEngine.invokeScript(GroovyInstallEngine.groovy:68)
    at com.rsa.plugins.install.GroovyInstallEngine$_runTask_closure2.doCall(GroovyInstallEngine.groovy:57)
    at com.rsa.plugins.install.GroovyInstallEngine.runTask(GroovyInstallEngine.groovy:56)
    at com.rsa.plugins.install.GroovyInstallEngine$_runTasks_closure3.doCall(GroovyInstallEngine.groovy:106)
    at com.rsa.plugins.install.GroovyInstallEngine.runTasks(GroovyInstallEngine.groovy:105)
    at com.rsa.plugins.install.GroovyInstallEngine$runTasks.call(Unknown Source)
    at com.rsa.plugins.install.CommandLineInstallEngine.main(CommandLineInstallEngine.groovy:40)
Configuration step UpdateRollback:preUpdate [FAILED]

 

Cause
The config.xml located in /opt/rsa/am/server/pending directory must be removed in order to continue.
Resolution
  1. Ensure SSH access is enabled on the primary. Check this by logging on to the Operations Console and selecting Administration > Network Access.
  2. Open an SSH session on the Authentication Manager primary.
  3. Login to the primary Authentication Manager server as rsaadmin and enter the operating system password.
  4. Check that all services are running. Type: /opt/rsa/am/server/rsaserv status all
  5. If services are shutdown, restart the RSA AM services. Type: /opt/rsa/am/server/rsaserv restart all
  6. Navigate to the /opt/rsa/am/server/pending directory. Type: cd /opt/rsa/am/server/pending
  7. List the files in the pending directory. Type: ls -lh
  8. If the config.xml file is present, remove it, Type: rm config.xml
  9. Confirm that the file is no longer present. Type: ls -lh
  10. Try to upgrade the primary instance.
Notes
  • During the update process the administrator will be prompted to enter the rsaadmin password. At this point of the software update please check if /opt/rsa/am/server/pending/config.xml has returned and remove it. Keep checking the /opt/rsa/am/server/pending folder for the presence of the config.xml file during the software update process and remove it.
  • We would also recommend checking the replica to see if the config.xml is present in the /opt/rsa/am/server/pending directory and follow the same steps above to remove it if that is the case.