NSM McAfee Linux OS|| 9.2 to 10.1 upgrade || no matching cipher

[tonyssbear]

Hi All,

I have am NSM appliance Linux which import from an OVA 

I am trying to upgrade it to 10.1 version, but facing an error

Procedure I have done:

1. Upload bin file to NSM by filezilla

2. SSH connection to NSM by Tera Term

3. Preform Upgrade script

Any idea to preform upgrade?

Regards

Tony

[petermason]

Hi Tony,

What version of 9.2 are you currently using? Is it a FIPS  / Certified version?

Have you checked with support to see if your current version is supported for upgrade directly to 10.1?

Regards

Peter

[fkazi04 · Accepted solution]

Hi @tonyssbear 

There are few things to be considered here:

1. If you are upgrading from the 9.1.7.49/9.1.7.63/9.1.7.73 upgrade to 9.1.7.77.10 and then to 10.1.7.4. For all other builds i.e. 9.1.7.75 & 9.1.7.77 direct upgrade is possible. 

2. Kindly don't use the NSM server itself as the source for copying upgrade file.

3. You must check from your Linux server on why the ciphers are not being accepted.

4. Kindly confirm exact manager manager version from where you are upgrading.

Regards,

Faizan

[tonyssbear]

HI Faizan,

1. Existing version is 9.2.9.12

2. ssh cannot connect to NSM because of ciphers are not being accepted, I do think it is the expected behaviors of NSM on McAfee Linux OS

BTW, I use another server to SCP, but facing another issue

I do not have the sql root password.....

May anyone have the default password bring wih MLOS? (MLOSnsmApp, admin123,McAfee123$ is not correct) (There is another guide "NSP_Manager_Appliance_Linux_Installation_Guide_revI_en-us" contain the password)

Regards

Tony

[fkazi04]

HI @tonyssbear ,

SSH is not restricted for Linux NSM it is just the ciphers used by most terminal software that are not supported like Putty. You can use Bitvise SSH client to SSH into Linux NSM CLI. 

Link for Bitvise SSH client: https://www.bitvise.com/ssh-client-download

Kindly try using root123 as the database password. Otherwise try resetting database password using passwordchange.sh script file.

I hope this answers your question.