• State Suggested Answer
  • Replies replies
    5
  • Answers answer
    1
  • Subscribers subscribers
    16
  • Views views
    570
  • Users 0 members are here

Error upgrading IG from 3.7.3 to 4.2

lelle

Hello,

we have tried to upgrade IG to version 4.2 on Linux, but it seems to fail on loading OSP
We did first run the upgrade script to update related components, that worked well
After the we did upgrade OSP, allowed install to create the new config encrypt-keys keystore, after upgrade we tested to execute configupdate.sh for osp, that worked well
Finally we did run the installer for IG, upgrading all components. Selected to use a excisting keystore for encrypting pointing to encrypt-keys.pkcs12 in /(tomcat/conf directory.
Restarted server, unable to login, OSP is not working and we are unable to execute configupdate.se with, since decryption fails (we are able to open keystore offline with same passphrase)
See this error in osp.log
"log Data: Configuration load failed. An empty configuration will be used.: internal.atlaslite.jcce.exception.CoreExceptionWithOutcome: Loading system configuration named 'current' failed. Reason: Loading bootstrap properties.
         =>internal.atlaslite.jcce.validation.ValidationException: java.lang.IllegalStateException: com.netiq.ism.obfuscate.NoSecretKeyException: Unable to decrypt data with any of the 1key(s)"
And this in catalina.<date>.log
[SEVERE] 2024-04-15 16:42:32.523 [org.apache.catalina.core.StandardContext] One or more listeners failed to start. Full details will be found in the appropriate container log file
[SEVERE] 2024-04-15 16:42:32.526 [org.apache.catalina.core.StandardContext] Context [/api] startup failed due to previous errors
[SEVERE] 2024-04-15 16:42:32.559 [com.netiq.iac.server.j2ee.ArcServerInitListener] [IG-SERVER] Invalid component key: [api_server]

We can roleback the upgrade, but still get error when trying to launch configupdate.sh after roleback, might be related to the database is not rolled back

Thanks

Lennart

  • 0  

    Hello,

    1) Did you utilize a GUI, Console, or Silent install?

    2) Are you installing Identity Governance on the same Tomcat server that OSP was installed on?

    3) Did you confirm there are no errors or warnings in the IG installation log file?

    Note: The error is on loading the main IG war, not OSP


    Sincerely,
    Steven Williams
    Principal Enterprise Architect
    OpenText Cybersecurity

  • 0 in reply to   

    Hello Steven,

    Thanks a lot for your reply.

    1, GUI upgrade of both OSP and IG

    2, Yes

    3, Sorry, no. But did not. Was happy that installer claims it was a success.. can upgrade again tomorrow and see if we get any error messages in installer log

  • 0 in reply to   

    Now I have verified that it's only success in both IG and OSP install log files

  • 0 in reply to   

    We started up a week ago and upgraded our test IG, witch is more or less the same as our production server and that went fine, so we thought that  production would be easy.

    There are difference in the Identity_Governance_InstallLog.log when we compare them.

    In the working (test) environment we got this entry, but not i production

    #ConfigUpdate details
    #--------------------
    USER_MAGIC_FOLDER_9=/opt/netiq/idm/apps/configupdate

    and

    Custom Action:            com.netiq.idmapps.ia.custom.IAVariableTrimmer
                                          Status: SUCCESSFUL

    In the not working (production) environment we got database install entry's that we don't have in test, even if we made the same choices to what I thought was to update the ms-sql database schemas.

    In working test IG we see this

    install_db_create_yes=0
    install_db_create_no=1
    In not so working prod IG we see the oposit
    install_db_create_yes=1
    install_db_create_no=0
    and
    Execute Script/Batch file: Database Creation
    Status: SUCCESSFUL

    Modify Text File - Single File: New File /opt/netiq/idm/apps/idgov/logs/dbtool-create-log.txt
    Status: SUCCESSFUL
    In log file dbtool-create-log.txt I see that database already exist and install is skipping
    Thanks
    Lennart

  • Suggested Answer

    0 in reply to 

    We managed to find out what went wrong, problem was related to new encrypt keystore, we got it wring the first time and did not restore databases from backup only IG snapshots. I suppose that the install/upgrade creates a key in database that has to match the encrypt keystore.

    So restoring database backup and create the keystore in OSP setup and use the same keystore in IG upgrade resolved the issue.

    /Lennart

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.