Upgrade issue from RCM 6.7 to 6.8 with error on CMP
3 years ago
Originally Published: 2010-04-22
Article Number
000047852
Applies To
RSA Certificate Manager 6.8
Sun Solaris 2.8
Issue
Upgrade issue from RCM 6.7 to 6.8 with error on CMP
RCM upgrade error:
CallCMPServerSetup: Caught XDK Exception.

--- InvokeExternlCommand: Error executing the following command

["./cmp-setup" -d2 -f icmpserver.log "/opt/rsa/RSA_CM/CmpServer/conf


Get the following in the upgrader.log

 

2010.04.16-19:40: --------------------------------------------------------

2010.04.16-19:40: B E G I N I N S T A L L

2010.04.16-19:40: --------------------------------------------------------

2010.04.16-19:40: Reading command line configuration file...

2010.04.16-19:40: Processing old Log Server configuration file...

2010.04.16-19:40: Processing old Directory configuration file...

2010.04.16-19:40: Processing old Administration configuration file...

2010.04.16-19:40: Processing old CMP Server configuration file...

2010.04.16-19:42: --------------------------------------------------------

2010.04.16-19:42: B E G I N I N S T A L L

2010.04.16-19:42: --------------------------------------------------------

2010.04.16-19:42: Reading command line configuration file...

2010.04.16-19:42: Processing old Log Server configuration file...

2010.04.16-19:42: Processing old Directory configuration file...

2010.04.16-19:42: Processing old Administration configuration file...

2010.04.16-19:42: Processing old CMP Server configuration file...

2010.04.16-19:43: Creating directories in new installation...

2010.04.16-19:43: Copying server certificates and keys...

2010.04.16-19:44: Configuring Secure Directory Server...

2010.04.16-19:44: Indexing database...

2010.04.16-19:44: This may take a while. Please be patient.

2010.04.16-20:51: Configuring CMP server...

2010.04.16-20:51: CallCMPServerSetup: Caught XDK Exception.

--- InvokeExternlCommand: Error executing the following command

["./cmp-setup" -d2 -f icmpserver.log "/opt/rsa/RSA_CM/CmpServer/conf/icmpserver.conf"]

2010.04.16-20:51: Install: Caught XDK Exception.

--- InvokeExternlCommand: Error executing the following command

["./cmp-setup" -d2 -f icmpserver.log "/opt/rsa/RSA_CM/CmpServer/conf/icmpserver.conf"]

 

 

and the following in the icmpserver.log

sudo cat /opt/rsa/RSA_CM/CmpServer/bin/icmpserver.log

Reading configuration parameters.

Reading configuration from file [/opt/rsa/RSA_CM/CmpServer/conf/icmpserver.conf]

Checking network.

Confirming existence of target directories:

/opt/rsa/RSA_CM/CmpServer/conf

/opt/rsa/RSA_CM/CmpServer/ssl/private

/opt/rsa/RSA_CM/CmpServer/ssl/certs

/opt/rsa/RSA_CM/CmpServer/logs

/opt/rsa/RSA_CM/CmpServer/state

*** Operation failed. ***

[XrcDECRYPTIONFAILURE: unable to complete decryption operation]


Copied the Upgrader directory into the 6.7 build and then ran the UPGRADE script. Ran the install script in the 6.8 build it gets around 2.5 hours into the xu_ldbmcat process and then asks for the SSL passphrase and enter it and it fails but still looks like it's rebuilding the ldif.


Resolution

Not using a HSM for ssl certificates, so removed this line in cmp conf file:

cmp-usePED "system-usePED"



Resigned all the system CA's and SSL certificares and upgrade worked without an issue.