Madikos 0 Posted July 2 Posted July 2 Hello, since morning i'm trying to migrate my eset protect on CentOS to downloaded VM with ESET Protect on-prem on Rocky. After start a new virtual appliance, i'm selecting pull database from other server and everything goes great. Than i'm shuting down old vm, configure same ip address, root password, hostname, etc. everything like in this tutorial: https://help.eset.com/protect_deploy_va/10.1/en-US/pull_db_from_other_server.html After reboot, cannot log in because of Communication error: trace.log is showing NodSslWriteEncryptedData error, but i've no idea how to solve id. Old vm: New vm:
Madikos 0 Posted July 3 Author Posted July 3 I've checked few hosts and they aren't showing any errors with connection to migrated console. It seems to work fine (even at new pc, with agent installed by GPO), but i still can't log in via webGUI
Administrators Solution Marcos 5,446 Posted July 3 Administrators Solution Posted July 3 Couldn't it be that you didn't have advanced security enabled before migration to the Rocky Linux VA? https://support.eset.com/en/kb8641
Madikos 0 Posted July 3 Author Posted July 3 3 hours ago, Marcos said: Couldn't it be that you didn't have advanced security enabled before migration to the Rocky Linux VA? https://support.eset.com/en/kb8641 Point for You switch to SHA1 solve the log in problem. All hosts are connecting propely. Now i need to recreate certificates and deploy them. Eset Staff again solve my problem good job
Madikos 0 Posted July 4 Author Posted July 4 On 7/3/2024 at 9:49 AM, Marcos said: Couldn't it be that you didn't have advanced security enabled before migration to the Rocky Linux VA? https://support.eset.com/en/kb8641 KB8641 want's me to create a new CA and new server certificate, then wait until the public part of the newly created SHA2 CA is replicated to all ESET Management Agents. But i've got 300 agents, they aren't always online.. so what will happen, if i switch Server certificate to new sha2 server certificate? If i miss some and it apear after 2 weeks, server will refuse its connection??
Madikos 0 Posted July 5 Author Posted July 5 On 7/3/2024 at 9:49 AM, Marcos said: Couldn't it be that you didn't have advanced security enabled before migration to the Rocky Linux VA? https://support.eset.com/en/kb8641 Please keep in mind, that when i switch crypto-policies back to DEFAULT, all my host's agents are connecting sucessfull to ERA. There is just a problem with webGui and communication error.
Recommended Posts