Smart Software On-Prem Console - upgrade to 9-202504 failure

[hunnymonster]

Has anyone else attempted an upgrade from 9-202502 to 9-202504 yet? I've tried it 2 times so far - both fail at the final step (it seems the application doesn't complete its startup - at least according to the syslog). Thankfully rolling back to the snapshot I took at the start of the process worked 100%.

[ttsws]

Here, too ...

The log says:
Configuring Cerberus for runtime operations...
Relabeled /usr/bin/cerberus from unconfined_u:object_r:user_tmp_t:s0 to unconfined_u:object_r:bin_t:s0
Starting application...
Waiting for frontend...
Waiting for frontend...
Waiting for frontend...
... for one hour now.

After cerberus the sattelite script is started, then it is waiting for https://localhost:8443, but this never responds.

Did not dig deeper.

[OneAbakus]

Hi,

I had the same problem with the upgrade.

You can download a supplementary patch for 9-202504 to resolve the problem.

Best regards

[ttsws]

[Deca]

Still the problem here even with the new patch.
Revert back to 9-202502.

[OneAbakus]

The update process took at least 10 to 15 minutes after I installed the supplemantery patch, while the main update window continued to prompt the "waiting for frontend...." errors. There was no indication that the patch process is still in progress. 

I wanted to roll back to, when suddenly the "SSM Update completed!" message appeared

[hunnymonster]

Yep - new postfix patch. Obviously that wasn't there on 26 May...

[KoleSlaw19]

What are the suggestions if the "Waiting for frontend..." never stops? The supplement patch document states not to revert in the current state. I've applied the patch 30 to 40 minutes ago and the device is still in the same state. Hasn't finished the upgrade yet.

[KoleSlaw19]

I opened a TAC case. Not sure if the problem is that I'm running in STIG mode or what but hopefully we can find a solution.

[Deca]

Not in STIG mode and same problem.

[KoleSlaw19]

I'm still working with TAC, the supplemental patch is meant for air-gap on-prem CSSM appliances from what I'm reading however my appliances are not air-gapped. They have access to Cloud SSM and the internet. So I'm not sure why these continue to fail. 
Even installing a brand new VM with the 9-202504 ISO is failing. I get an error messages on the Web UI after initial installation and when I run the version command, I get an error message that not all services are running and the system can't determine the current running version.

[KoleSlaw19]

Found a solution. My On-Prem CSSM was still the same VM I migrated from 8-* version. What I ended up doing was taking a db backup of my existing 9-202502 version, export the file. Then I created a new VM using the base version 9-202412, upgraded to 9-202502, then I restored my db. New VM was working just fine. Then I upgraded to 9-202504, when the "Waiting for frontend..." message appeared, I applied the patch. In about 12 minutes, the upgrade completed. Successfully upgraded to 9-202504. 

Not sure what the problem was with with old VM, it had multiple update patches from the past applied. Could have been something didn't apply due to the previous patches. If you get stuck and you are not able to upgrade to 9-202504, the work around did allowed me to upgrade.