IBM Support

QRadar Configuration and Data Backups can fail after upgrading to UP15 IF01

Flashes (Alerts)


Abstract

IBM has identified an issue where QRadar Backups for both Configuration and Data may not be created after upgrading from QRadar 7.5.0 Update Package 15 to QRadar 7.5.0 Update Package 15 IF01.

Content

Technical note updates

  • 31 March 2026 03:18 PM BST : A Flash notice was released to users to alert them of a Backup creation issue . Users can apply the workaround documented in this flash notice to resolve the issue.
 

Urgency


Critical: QRadar Backups for both Configuration and Data may not be created after upgrading from QRadar 7.5.0 Update Package 15 to QRadar 7.5.0 Update Package 15 IF01. Resulting in the inability to restore your QRadar deployment to its most recent state, in the event of a rebuild. 
 
It has been reported that backups are currently failing on build QRadar 7.5.0 Update Package 15 IF01 due to an issue during the signing process at the end of backup creation. An OpenSSL error occurs while signing the file, which results in the backup creation failing.

There is additional command line workarounds below to address this issue. 
 

Affected products

QRadar SIEM 

Note: QRadar on Cloud is not impacted.
 
 

Workaround

 

Procedure to resolve DT466765

  1. Use SSH to log in to the QRadar console as the root user.
     

  2. Please run the following command from the Console prompt. This will create a temporary directory under the /store partition on the Console and ManagedHosts, move the old ssl configuration and recreate new ssl configuration:

    /opt/qradar/support/all_servers.sh -C "if [[ -d /store/backup/ssl ]]; then if [[ ! -d /store/ibm_support ]]; then mkdir -p /store/ibm_support; fi; mv -vf /store/backup/ssl /store/ibm_support/; /opt/qradar/bin/backupsign_cert_import.sh; fi"
  3. Once complete, Login as Admin to the QRadar Console UI. 
    Access 'Backup and Recovery' from the Admin tab and attempt to create an 'On Demand Backup'. 

    Results
    This will regenerate your keys, the Backup completes successfully and is visible in the UI.
 
 

Review for missing Data Backups


In the event that you have upgraded to QRadar 7.5.0 Update Package 15 IF01 more than 24 hrs, you may be at risk of having missing Data Backups since the time of Upgrade. To review and address this issue please follow steps below:
 
  1. Login as Admin to the QRadar Console UI.
    Access 'Backup and Recovery' from the Admin tab and ensure all required Data Backups are present.
  2. Manually create missing Data Backups using the Technote below:
    QRadar: How to manually create Data Backups
    Note: As per the Technote the commands need to be executed on the Console or ManageHost that is missing the Data Backup. 

    Results
    All missing Data Backups are created and visible in the UI 'Backup and Recovery' tab.
     

Additional Post Workaround Checks


To ensure that the workaround was completely successful the additional post workaround steps should be followed:
 

  1. Wait 24 hrs after workaround is completed.
  2. Login as Admin to the QRadar Console UI.
    Access 'Backup and Recovery' from the Admin tab to ensure that the nightly scheduled Backups have been created successfully.

    Results
    All scheduled Backups complete without error.
 

We apologize for any inconvenience due to this issue. If you have questions about the contents of this technical note, contact QRadar Support.

- QRadar Support

 
 

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"ARM Category":[{"code":"a8m0z000000cwtNAAQ","label":"Deployment"}],"ARM Case Number":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.5.0"}]

Document Information

Modified date:
31 March 2026

UID

ibm17268173

Page Feedback