IBM Support

QRadar: Deploy fails on all of the managed hosts after backup is restored

Troubleshooting


Problem

The administrator migrated the QRadar Console to a new appliance and after restoring the configuration backup a Deploy Changes fails to complete on all of the managed hosts.

Symptom

The error in /var/log/qradar.error on the MHs would show the following error:

[ecs-ec] javax.net.ssl.SSLHandshareException: java.security.cert.CertificateException: Server certificate not recognized

Cause

This is cause if the customer is using custom SSL certificate and has not imported the SSL cert.

Environment

QRadar 7.2.4 or later

Diagnosing The Problem

NA

Resolving The Problem

Install the SSL certificate using the /opt/qradar/bin/install_ssl_cert.sh -i command as per the Admin Guide.

[{"Product":{"code":"SSBQAC","label":"IBM QRadar SIEM"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"Admin Console","Platform":[{"code":"PF016","label":"Linux"}],"Version":"7.2","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21966737