epo upgrade

[cdinet]

what does the core-patch.log say?

[bola_2911]

Debug: using JAVA_HOME=C:/PROGRA~2/McAfee/EPOLIC~1/JRE

Unable to locate tools.jar. Expected to find it in C:\PROGRA~2\McAfee\EPOLIC~1\lib\tools.jar

Buildfile: C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\build.xml

[cdinet]

is that the first log in the list of your screenshot?  The core-patch log should show something "build failed...."

[bola_2911]

No the second one.

first one is empty.

-K

[cdinet]

can you attach all the logs that are in the mcafeelogs folder, including the troubleshoot folder directory?

[bola_2911]

C:\Users\ADMINI~1\AppData\Local\Temp\McAfeeLogs\EPO530-Troubleshoot\MFS

Core-patch

    [echo] catalina.home is C:/PROGRA~2/McAfee/EPOLIC~1/server

[init-security-providers] log4j:WARN No appenders could be found for logger (com.mcafee.orion.core.SecurityProviders).

[init-security-providers] log4j:WARN Please initialize the log4j system properly.

[init-security-providers] log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.

set-previous-version-upgrade:

     [echo] previous version=5.5.2.0

init-install:

find-jre:

backup-jre-config:

     [echo] backing up JRE files

     [copy] Copying 1 file to C:\PROGRA~2\McAfee\EPOLIC~1\jre\mfs_backup

     [copy] Copying C:\PROGRA~2\McAfee\EPOLIC~1\jre\lib\security\java.security to C:\PROGRA~2\McAfee\EPOLIC~1\jre\mfs_backup\lib\security\java.security

backup-tomcat-config:

     [echo] backing up tomcat files

     [copy] Copying 40296 files to C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\catalina-bak

     [copy] Copying 88 files to C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\catalina-bak\extensions\installed

backup-config:

export-orion-key:

     [echo] Previous JRE path is: C:/PROGRA~2/McAfee/EPOLIC~1/JRE.bak

import-orion-key:

test-db:

BUILD FAILED

C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\build.xml:1212: Network error IOException: Error creating premaster secret.

Total time: 5 minutes 15 seconds

Core-patch STDOUT

Debug: using JAVA_HOME=C:/PROGRA~2/McAfee/EPOLIC~1/JRE

Unable to locate tools.jar. Expected to find it in C:\PROGRA~2\McAfee\EPOLIC~1\lib\tools.jar

Buildfile: C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\build.xml

Core-rollback

     [echo] catalina.home is C:/PROGRA~2/McAfee/EPOLIC~1/server

[init-security-providers] log4j:WARN No appenders could be found for logger (com.mcafee.orion.core.SecurityProviders).

[init-security-providers] log4j:WARN Please initialize the log4j system properly.

[init-security-providers] log4j:WARN See http://logging.apache.org/log4j/1.2/faq.html#noconfig for more info.

set-previous-version-downgrade:

     [echo] previous version=5.5.2.0

init-install:

downgrade-extensions:

Backup version for extName= 'responsedemo' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the responsedemo extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] responsedemo downgraded

Backup version for extName= 'issuedemo' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the issuedemo extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] issuedemo downgraded

Backup version for extName= 'Issue' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the Issue extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] Issue downgraded

Backup version for extName= 'response' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the response extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] response downgraded

Backup version for extName= 'ldap' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the ldap extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] ldap downgraded

Backup version for extName= 'rs' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the rs extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] rs downgraded

Backup version for extName= 'help' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the help extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] help downgraded

Backup version for extName= 'ldapsync' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the ldapsync extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] ldapsync downgraded

Backup version for extName= 'dr' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the dr extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] dr downgraded

Backup version for extName= 'scheduler' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the scheduler extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] scheduler downgraded

Backup version for extName= 'report' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the report extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] report downgraded

Backup version for extName= 'console' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the console extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] console downgraded

Backup version for extName= 'ui' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the ui extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] ui downgraded

Backup version for extName= 'commonui-core-rest' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the commonui-core-rest extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] commonui-core-rest downgraded

Backup version for extName= 'commonui-core-common' toVersion= 'null'

Unable to locate old version in backup table

no action was taken to downgrade the commonui-core-common extension because of the exception java.sql.SQLException: com.mcafee.orion.core.db.base.DatabaseConnectivityException: Failed to get a connection: Network error IOException: Error creating premaster secret. . Navigate to /core/config and verify database connection settings

     [echo] commonui-core-common downgraded

unobfuscate-authuris:

[obfuscate-authuris] Skipping unobfuscation from version 2 because the target core version is 5.5.2.0.

[obfuscate-authuris] Skipping unobfuscation from version 1 because the target core version is 5.5.2.0.

restore-sql-logins:

db-downgrade:

BUILD FAILED

C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\build.xml:1677: java.sql.SQLException: Network error IOException: Error creating premaster secret.

at net.sourceforge.jtds.jdbc.JtdsConnection.<init>(JtdsConnection.java:429)

at net.sourceforge.jtds.jdbc.Driver.connect(Driver.java:180)

at java.sql.DriverManager.getConnection(DriverManager.java:664)

at java.sql.DriverManager.getConnection(DriverManager.java:208)

at com.mcafee.orion.core.db.sqlserver.JtdsJdbcDriver.getConnection(JtdsJdbcDriver.java:107)

at com.mcafee.orion.core.db.base.DriverRegistry.getConnection(DriverRegistry.java:322)

at com.mcafee.orion.core.db.base.DriverRegistry.getConnection(DriverRegistry.java:290)

at com.mcafee.orion.core.db.base.Database.getConnectionNoPoolInternal(Database.java:737)

at com.mcafee.orion.core.db.base.Database.getConnectionNoPool(Database.java:755)

at com.mcafee.orion.core.db.base.SqlUtil.executeSql(SqlUtil.java:92)

at com.mcafee.orion.core.db.base.SqlUtil.executeSql(SqlUtil.java:62)

at com.mcafee.orion.core.db.base.SqlUtil.executeSqlFile(SqlUtil.java:220)

at com.mcafee.orion.core.db.base.SqlUtil.executeSqlFile(SqlUtil.java:175)

at com.mcafee.orion.core.install.RunSqlTask.execute(RunSqlTask.java:70)

at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:291)

at sun.reflect.GeneratedMethodAccessor4.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at org.apache.tools.ant.dispatch.DispatchUtils.execute(DispatchUtils.java:106)

at org.apache.tools.ant.Task.perform(Task.java:348)

at org.apache.tools.ant.Target.execute(Target.java:392)

at org.apache.tools.ant.Target.performTasks(Target.java:413)

at org.apache.tools.ant.Project.executeSortedTargets(Project.java:1399)

at org.apache.tools.ant.Project.executeTarget(Project.java:1368)

at org.apache.tools.ant.helper.DefaultExecutor.executeTargets(DefaultExecutor.java:41)

at org.apache.tools.ant.Project.executeTargets(Project.java:1251)

at org.apache.tools.ant.Main.runBuild(Main.java:811)

at org.apache.tools.ant.Main.startAnt(Main.java:217)

at org.apache.tools.ant.launch.Launcher.run(Launcher.java:280)

at org.apache.tools.ant.launch.Launcher.main(Launcher.java:109)

Caused by: javax.net.ssl.SSLException: Error creating premaster secret.

at com.rsa.sslj.x.aH.b(Unknown Source)

at com.rsa.sslj.x.aH.a(Unknown Source)

at com.rsa.sslj.x.aH.b(Unknown Source)

at com.rsa.sslj.x.ap.d(Unknown Source)

at com.rsa.sslj.x.ap.a(Unknown Source)

at com.rsa.sslj.x.ap.j(Unknown Source)

at com.rsa.sslj.x.ap.i(Unknown Source)

at com.rsa.sslj.x.ap.h(Unknown Source)

at com.rsa.sslj.x.aS.startHandshake(Unknown Source)

at net.sourceforge.jtds.ssl.SocketFactories$TdsTlsSocketFactory.createSocket(SocketFactories.java:101)

at net.sourceforge.jtds.jdbc.SharedSocket.enableEncryption(SharedSocket.java:330)

at net.sourceforge.jtds.jdbc.TdsCore.negotiateSSL(TdsCore.java:574)

at net.sourceforge.jtds.jdbc.JtdsConnection.<init>(JtdsConnection.java:357)

... 29 more

Caused by: com.rsa.sslj.x.aL: Error creating premaster secret.

at com.rsa.sslj.x.bD.<init>(Unknown Source)

at com.rsa.sslj.x.bm.n(Unknown Source)

at com.rsa.sslj.x.bm.k(Unknown Source)

at com.rsa.sslj.x.bm$1.run(Unknown Source)

at com.rsa.sslj.x.aH$1$1.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at com.rsa.sslj.x.aH$1.run(Unknown Source)

... 38 more

Caused by: java.security.InvalidKeyException: Invalid RSA key for encrypting; n (1024) < 2048

at com.rsa.cryptoj.o.fw.engineInit(Unknown Source)

at com.rsa.cryptoj.o.fw.engineInit(Unknown Source)

at javax.crypto.Cipher.init(Cipher.java:1246)

... 45 more

Total time: 1 minute 56 seconds

core-rollback STDOUT

Debug: using JAVA_HOME=C:/PROGRA~2/McAfee/EPOLIC~1/JRE

Unable to locate tools.jar. Expected to find it in C:\PROGRA~2\McAfee\EPOLIC~1\lib\tools.jar

Buildfile: C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\build.xml

Install

# installation configuration parameters

# comment out if you don't want the extensions installed as a part of the install.

build.extensions=true

# uncomment this if you are installing Orion into an existing database and don't

# want the contents of that database dropped (e.g. installing into an epo db)

# if true, the database will only be created if it doesn't already exist, otherwise

# the database will be dropped and created.

skip.db.create=true

# comment out if you don't want to install the JRE (e.g. to use one already

# installed on the machine)

jvm.install=true

# ------ directories ---------

orion.home     = C:/PROGRA~2/McAfee/EPOLIC~1

orion.jre.home = C:/PROGRA~2/McAfee/EPOLIC~1/jre

previous.jre.home=@previous.jre.home@

## ------ tomcat conf settings ---------

tomcat.port = 8080

tomcat.secure.port=8443

tomcat.auth.port=8444

tomcat.shutdown.port=9000

# tomcat.session.timeout is a number, representing the minutes before an idle

# session will time out - set to a reasonable number like 30

tomcat.session.timeout=30

# tomcat.nonssl.connector should be set to enabled if you want tomcat.port to be active

tomcat.nonssl.connector=@tomcat.nonssl.connector@

# ------ cluster settings ------

# comment out core.cluster.group unless you are setting up clustering

core.cluster.group=

second.tomcat.port = @second.tomcat.port@

second.tomcat.secure.port=@second.tomcat.secure.port@

second.tomcat.auth.port=@second.tomcat.auth.port@

second.tomcat.shutdown.port=@second.tomcat.shutdown.port@

tomcat.loadbalancer.port =

# ------ certificate generation ---------

#

# keystore.cert.hostname - hostname to use for certificate generation.  Leave

#                          this property commented if not installing into

#                          a cluster environment since this will cause the hostname

#                          the machine executing the installer to be used.

#                          If installing into a cluster environment then make sure

#                          this property is uncommented and set its value to that

#                          of the virtual host name.

keystore.cert.hostname=

# ------ db conf settings ---------

#server's db settings...

orion.db.server.name   = WIN-KDHM1PVIA2I

orion.db.database.name = ePO_WIN-KDHM1PVIA2I

orion.db.instance.name = SQLEXPRESS

orion.db.port          = 64024

orion.db.user.name     = Administrator

orion.db.user.domain   = SAINI10

orion.db.user.passwd   =

orion.db.param.ssl     = request

orion.db.jdbc.driver   = jtds

orion.db.param.USENTLMV2=true

# ------ initial configuration ---------

# this is the initial username and password that will be added after installation

admin.username=admin

admin.password=

system.password=

#--------------------------------------------

# Disaster Recovery Properties

#--------------------------------------------

orion.keystore.password=@orion.keystore.password@

orion.db.sqlexpress=@orion.db.sqlexpress@

# Determines the initial runlevel of the server. Allowed values are MAINTENANCE or RUN. If not

# provided, then RUN is the default.

core.startup.runlevel=Run

#--------------------------------------------

# Password obfuscation key location

#--------------------------------------------

obfuscation.v2.key.registry.key=SOFTWARE/Wow6432Node/Network Associates/ePolicy Orchestrator/Secured

obfuscation.v2.key.registry.value=InstallKey

# Determine the search mode for LDAP groups.Can be DIRECT or RECURSIVE. Value is RECURSIVE by default.

ldap.direct.group.search=@ldap.direct.group.search@

[cdinet]

BUILD FAILED

C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Installer\core\build.xml:1212: Network error IOException: Error creating premaster secret.

This points to either an invalid password (rare for install or upgrade) or possibly lack of permissions on the sql account you are using for the database.

When you are in sql management studio, security, logins and properties for the account you are using to authenticate to the database, what is the default database?  If epo db, it needs to be master.  Under server roles, temporarily give it sysadmin permissions and under user mapping, ensure that on the epo database it has dbo and public.  If it is an NT account (Windows vs sql authentication), that account also needs to be a local administrator on the epo server.

[bola_2911]

Default database is Master.

User mapping

epo database is dbo and public

[cdinet]

Here is what I would suggest.  In server settings, disaster recovery, change the password to something you are sure that you know and try to temporarily keep it simple with not too complex passwords.  It can be reset after the upgrade.  Then, during the upgrade, use that password.  If you still get the same errors, please call into support so they can assist you during the install.  Also, since that is Windows authentication, make sure that account is a local administrator on the epo server itself.

[cdinet]

Do you have ssl enabled for database connections?  Do you have a CSR, siem, or other reporting software or appliance connected to the database also?  If so, make sure those are disconnected during installs.  Check KB87731 and try the steps in that KB.  Check also KB89995 to see if it applies.